<<<<<<< HEAD

MCP SQL Server Gateway

Enterprise-safe MCP server for Claude Enterprise access to approved on-prem SQL Server data.

Goal

Expose governed, auditable, read-only SQL Server tools through a remote MCP endpoint.

Related MCP server: SQL Server MCP

First principles

• SQL Server remains private.

• Claude never connects directly to SQL.

• MCP gateway enforces authentication, authorization, query controls, logging, timeouts, and row limits.

• Start with metadata, saved reports, and read-only SELECT access.

• Prefer approved SQL views over raw tables.

Initial MCP tools

• sql_list_databases

• sql_list_schemas

• sql_list_tables

• sql_describe_table

• sql_sample_rows

• sql_query_readonly

• sql_saved_report

Suggested phases

1. Project scaffold and local mock MCP server.

2. Read-only SQL connector against dev SQL.

3. AuthN/AuthZ and allowlist policy.

4. AKS deployment behind existing MCP ingress pattern.

5. Claude Enterprise custom connector registration.

6. Observability, audit, and production hardening.

cp-apps-mcp-onpremsql

a09eb63f3769fc96fe2e82314af1d8c0db9aa3bb