steampipe-mcp
Steampipe モデルコンテキストプロトコル (MCP) サーバー
Steampipeで AI 駆動型インフラストラクチャ分析のパワーを解き放ちましょう。このモデルコンテキストプロトコルサーバーは、Claude などの AI アシスタントをクラウドインフラストラクチャデータにシームレスに接続し、クラウド資産全体の自然言語による探索と分析を可能にします。
Steampipe MCP は AI アシスタントとインフラストラクチャ データを橋渡しし、自然言語を可能にします。
AWS、Azure、GCP、100以上のクラウドサービスにわたるクエリ
セキュリティとコンプライアンス分析
コストとリソースの最適化
クエリ開発支援
ローカルのSteampipeインストールとTurbot Pipesワークスペースの両方で動作し、すべてのクラウドおよび SaaS データへの安全な読み取り専用アクセスを提供します。
インストール
前提条件
Node.js v16 以上(
npxを含む)ローカル使用の場合: Steampipeがインストールされ、実行中 (
steampipe service start)Turbot Pipesの場合: Turbot Pipesワークスペースと接続文字列
構成
AI アシスタントの設定ファイルに Steampipe MCP を追加します。
{
"mcpServers": {
"steampipe": {
"command": "npx",
"args": [
"-y",
"@turbot/steampipe-mcp"
]
}
}
}デフォルトでは、 postgresql://steampipe@localhost:9193/steampipeにあるローカルのSteampipeインストールに接続します。必ず最初にsteampipe service start実行してください。
代わりにTurbot Pipesワークスペースに接続するには、接続文字列を args に追加します。
{
"mcpServers": {
"steampipe": {
"command": "npx",
"args": [
"-y",
"@turbot/steampipe-mcp",
"postgresql://my_name:my_pw@workspace-name.usea1.db.pipes.turbot.com:9193/abc123"
]
}
}
}AIアシスタントのセットアップ
アシスタント | 設定ファイルの場所 | セットアップガイド |
クロードデスクトップ |
| |
カーソル |
|
変更を有効にするには、設定ファイルを保存し、AI アシスタントを再起動します。
Related MCP server: tailpipe-mcp
プロンプトガイド
まず、MCPサーバーに含まれるbest_practicesプロンプトを実行して、LLMにSteampipeの最適な使い方を教えましょう。その後は、何でも質問してください!
クラウド インフラストラクチャを探索します。
What AWS accounts can you see?シンプルで具体的な質問が効果的です。
Show me all S3 buckets that were created in the last weekインフラストラクチャ レポートを生成します。
List my EC2 instances with their attached EBS volumesセキュリティ分析の詳細:
Find any IAM users with access keys that haven't been rotated in the last 90 daysコンプライアンスの洞察を得る:
Show me all EC2 instances that don't comply with our tagging standards潜在的なリスクを調べる:
Analyze my S3 buckets for security risks including public access, logging, and encryption以下の点に注意してください:
分析するクラウド リソース (EC2、S3、IAM など) を具体的に指定します。
特定の地域やアカウントに興味がある場合は、その地域やアカウントを記載してください
複雑な条件を追加する前に、簡単なクエリから始めてください
自然言語を使用する - LLMがSQL翻訳を処理する
大胆かつ探究的に行動しましょう。LLM は、インフラストラクチャ全体にわたる洞察を発見するのに役立ちます。
機能
ツール
steampipe_query
SQL を使用してクラウドとセキュリティ ログをクエリします。
最高のパフォーマンスを得るには、結合の代わりに CTE を使用し、要求される列を制限します。
すべてのクエリは読み取り専用であり、PostgreSQL 構文を使用します。
入力:
sql(文字列): PostgreSQL構文を使用して実行するSQLクエリ
蒸気管テーブルリスト
利用可能なすべての Steampipe テーブルを一覧表示します。
オプション入力:
schema(文字列): 特定のスキーマでテーブルをフィルタリングしますオプション入力:
filter(文字列): ILIKE パターンでテーブルをフィルターします (例: '%ec2%')
steampipe_table_show
列の定義、データ型、説明など、特定のテーブルに関する詳細情報を取得します。
入力:
name(文字列): 詳細を表示するテーブルの名前 (スキーマ修飾可能、例: 'aws_account' または 'aws.aws_account')オプション入力:
schema(文字列): テーブルを含むスキーマ
steampipe_plugin_list
システムにインストールされているすべてのSteampipeプラグインを一覧表示します。プラグインは、AWS、GCP、Azureなどのさまざまなデータソースへのアクセスを提供します。
入力パラメータは不要
steampipe_plugin_show
バージョン、メモリ制限、構成など、特定の Steampipe プラグインのインストールの詳細を取得します。
入力:
name(文字列): 詳細を表示するプラグインの名前
プロンプト
ベストプラクティス
Steampipe データの操作に関するベストプラクティス
以下の詳細なガイダンスを提供します。
回答スタイルとフォーマット規則
CTE(WITH句)と結合の使用
SQL構文とスタイルの規則
列の選択と最適化
スキーマの探索と理解
クエリの構造と構成
パフォーマンスの考慮とキャッシュ
エラー処理とトラブルシューティング
リソース
状態
Steampipe接続の現在の状態を表します
プロパティには次のものが含まれます:
connection_string: 現在のデータベース接続文字列
ステータス: 接続状態(接続/切断)
このリソースにより、AI ツールは Steampipe インスタンスへの接続ステータスをチェックおよび検証できるようになります。
発達
クローンとセットアップ
リポジトリをクローンし、次のディレクトリに移動します。
git clone https://github.com/turbot/steampipe-mcp.git
cd steampipe-mcp依存関係をインストールします:
npm installプロジェクトをビルドします。
npm run buildテスト
MCPをサポートするAIツールでローカル開発ビルドをテストするには、npmパッケージではなくローカルのdist/index.jsを使用するようにMCP設定を更新してください。例:
{
"mcpServers": {
"steampipe": {
"command": "node",
"args": [
"/absolute/path/to/steampipe-mcp/dist/index.js",
"postgresql://steampipe@localhost:9193/steampipe"
]
}
}
}または、MCP Inspector を使用してサーバーの実装を検証します。
npx @modelcontextprotocol/inspector dist/index.js環境変数
MCP サーバーを構成するには、次の環境変数を使用できます。
STEAMPIPE_MCP_LOG_LEVEL: サーバーのログの詳細度を制御します(デフォルト:info)STEAMPIPE_MCP_WORKSPACE_DATABASE: デフォルトの Steampipe 接続文字列を上書きします (デフォルト:postgresql://steampipe@localhost:9193/steampipe)
オープンソースと貢献
このリポジトリはApache 2.0ライセンスに基づいて公開されています。行動規範をご覧ください。皆様とのコラボレーションを楽しみにしています!
Steampipeは、 Turbot HQ, Inc.が独占的に開発したオープンソースソフトウェア製品です。Turbot HQ, Inc. の商用利用条件に基づいて配布されます。他社は本ソフトウェアを独自に配布できますが、Turbotの商標やクラウドサービスなどを使用することはできません。詳しくは、オープンソースに関するFAQをご覧ください。
参加する
お手伝いしたいけれど、どこから始めたらいいのか分からない? help wanted案件を1つ選んでください。
Available Tools
5 toolssteampipe_plugin_listA
List all Steampipe plugins installed on the system. Plugins provide access to different data sources like AWS, GCP, or Azure.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It describes what the tool does (lists plugins) and provides useful context about plugins providing access to data sources, but doesn't disclose behavioral traits like whether this requires specific permissions, how results are formatted, or if there are any rate limits. It adds some value but lacks operational details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with zero waste. First sentence states the core purpose, second adds helpful context about plugins. Well-structured and front-loaded with the essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and moderate complexity (listing operation), the description is adequate but incomplete. It explains what the tool does and provides context about plugins, but lacks details about return format, error conditions, or operational constraints that would be helpful for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has 0 parameters with 100% schema description coverage, so no parameter documentation is needed. The description appropriately doesn't discuss parameters, maintaining focus on the tool's purpose. Baseline for 0 parameters is 4, as it avoids unnecessary parameter discussion.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('List all') and resource ('Steampipe plugins installed on the system'), with additional context about what plugins provide. It distinguishes from siblings like steampipe_plugin_show (detail view) and steampipe_table_list (different resource type).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when needing to see installed plugins, but doesn't explicitly state when to use this vs. alternatives like steampipe_plugin_show for detailed plugin information or steampipe_table_list for table listings. No explicit exclusions or prerequisites are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
steampipe_plugin_showA
Get details for a specific Steampipe plugin installation, including version, memory limits, and configuration.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Name of the plugin to show details for |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions what details are returned (version, memory limits, configuration) but does not cover other important aspects such as error handling (e.g., what happens if the plugin doesn't exist), permissions required, or whether it's a read-only operation. This leaves significant gaps for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that efficiently conveys the tool's purpose and key details. It is front-loaded with the main action and resource, and every part of the sentence adds value without redundancy or unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (simple read operation with one parameter) and the lack of annotations and output schema, the description is moderately complete. It specifies what details are retrieved, but it does not fully compensate for the missing behavioral context (e.g., error handling, permissions) or describe the return format, which would be needed for higher completeness in the absence of an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, with the parameter 'name' clearly documented in the schema as 'Name of the plugin to show details for.' The description does not add any additional meaning or context beyond what the schema provides, such as format examples or constraints. With high schema coverage, the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('Get details') and resource ('a specific Steampipe plugin installation'), distinguishing it from siblings like 'steampipe_plugin_list' (which lists all plugins) and 'steampipe_table_show' (which shows table details). It explicitly mentions what details are included: version, memory limits, and configuration.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context by specifying 'a specific Steampipe plugin installation,' suggesting it should be used when details for a particular plugin are needed. However, it does not explicitly state when not to use it or name alternatives like 'steampipe_plugin_list' for listing all plugins, which would be required for a score of 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
steampipe_queryA
Query cloud infrastructure, SaaS, APIs, code and more with SQL.
Queries are read-only and must use PostgreSQL syntax.
For best performance: limit columns requested, use materialized CTEs instead of joins. Trust the search path unless sure you need to specify a schema.
Check available tables and columns before querying using steampipe_table_list and steampipe_table_show.
| Name | Required | Description | Default |
|---|---|---|---|
| sql | Yes | The SQL query to execute. Must use PostgreSQL syntax and be read-only. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It effectively describes key traits: queries are 'read-only,' must use 'PostgreSQL syntax,' and includes performance tips (limit columns, use CTEs, trust search path). This covers safety, syntax, and optimization, though it lacks details on error handling or output format.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured and front-loaded, starting with the core purpose. Each sentence adds value: purpose, constraints, performance tips, and sibling tool references. There is no wasted text, making it efficient and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (querying multiple data sources) and lack of annotations/output schema, the description does a good job covering key aspects: purpose, constraints, performance, and sibling tool integration. However, it doesn't explain return values or error cases, leaving some gaps for a tool with no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, with the parameter 'sql' fully documented in the schema. The description adds minimal semantics beyond this, only reiterating that SQL must be 'read-only' and use 'PostgreSQL syntax,' which is already in the schema. This meets the baseline for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Query cloud infrastructure, SaaS, APIs, code and more with SQL.' It specifies the verb ('query') and resources, but doesn't explicitly differentiate from sibling tools like steampipe_table_list/show, which are mentioned for checking tables rather than querying. This makes it clear but not fully sibling-distinguished.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use this tool vs alternatives: it instructs to 'Check available tables and columns before querying using steampipe_table_list and steampipe_table_show.' This clearly defines a usage sequence and distinguishes it from sibling tools, offering practical alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
steampipe_table_listB
List all available Steampipe tables. Use schema and filter parameters to narrow down results.
| Name | Required | Description | Default |
|---|---|---|---|
| schema | No | Optional schema name to filter tables by. If not provided, lists tables from all schemas. | |
| filter | No | Optional filter pattern to match against table names. Use ILIKE syntax, including % as a wildcard. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions that the tool 'lists' tables, which implies a read-only operation, but doesn't specify whether this requires authentication, how results are returned (e.g., pagination, format), or any rate limits. The description adds minimal behavioral context beyond the basic action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with just two sentences that are front-loaded and waste-free. The first sentence states the core purpose, and the second adds essential usage guidance, making every word earn its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's low complexity (2 optional parameters, no output schema, no annotations), the description is minimally adequate. It covers the basic purpose and hints at parameter usage but lacks details on behavioral aspects like authentication, result format, or error handling, which would be helpful for an agent to use it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description mentions that 'schema and filter parameters' can be used to 'narrow down results,' which adds some context about their purpose. However, with 100% schema description coverage, the input schema already fully documents both parameters, including their types, optionality, and usage details (e.g., ILIKE syntax for filter). The description provides only marginal value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('List all available Steampipe tables') and the resource ('Steampipe tables'), making the purpose immediately understandable. However, it doesn't explicitly differentiate this tool from its sibling 'steampipe_table_show' which likely shows details of a specific table rather than listing all tables.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides implied usage guidance by mentioning that schema and filter parameters can be used to 'narrow down results,' suggesting this tool is for listing tables with optional filtering. However, it doesn't explicitly state when to use this tool versus alternatives like 'steampipe_table_show' or 'steampipe_query,' nor does it provide exclusion criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
steampipe_table_showB
Get detailed information about a specific Steampipe table, including column definitions, data types, and descriptions.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The name of the table to show details for. Can be schema qualified (e.g. 'aws_account' or 'aws.aws_account'). | |
| schema | No | Optional schema name. If provided, only searches in this schema. If not provided, searches across all schemas. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It describes the tool's function but lacks details on behavioral traits such as error handling (e.g., what happens if the table doesn't exist), performance characteristics, or output format. This is a significant gap for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that efficiently conveys the tool's purpose and scope without unnecessary words. It's front-loaded with the main action and resource, making it easy to understand at a glance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (2 parameters, no output schema, no annotations), the description is minimally adequate. It covers the purpose but lacks behavioral context and output details, which are important for a tool that retrieves metadata. Without annotations or output schema, more completeness would be beneficial.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents both parameters ('name' and 'schema') with clear descriptions. The description doesn't add any parameter-specific information beyond what's in the schema, such as examples or constraints. Baseline 3 is appropriate when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Get detailed information') and resource ('specific Steampipe table'), and specifies the scope of information returned ('including column definitions, data types, and descriptions'). It distinguishes from the sibling 'steampipe_table_list' by focusing on details for a single table rather than listing tables. However, it doesn't explicitly contrast with 'steampipe_query' which might also return table information through queries.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when detailed metadata about a specific table is needed, but doesn't provide explicit guidance on when to use this tool versus alternatives like 'steampipe_table_list' for listing tables or 'steampipe_query' for querying data. It mentions the resource type ('Steampipe table') but lacks context on prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
- First observed
steampipe_plugin_list - First observed
steampipe_plugin_show - First observed
steampipe_query - First observed
steampipe_table_list - First observed
steampipe_table_show
TDQS
Scored across 5 tools
Each tool has a clearly distinct purpose with no overlap: listing plugins vs. showing plugin details vs. executing queries vs. listing tables vs. showing table details. The descriptions reinforce these distinctions, making misselection unlikely.
All tools follow a consistent 'steampipe_' prefix with a clear verb_noun pattern (plugin_list, plugin_show, query, table_list, table_show). This uniformity makes the tool set predictable and easy to navigate.
Five tools is well-scoped for the server's purpose of interacting with Steampipe. It covers plugin management, query execution, and table metadata without being overly sparse or bloated, with each tool earning its place.
The tool set provides strong coverage for querying and exploring Steampipe data, including plugin and table metadata. A minor gap exists in lacking direct plugin installation or configuration management tools, but agents can work around this using existing query capabilities.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
- mcpOAuthcom.vibgrate
Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.
- mcpOAuthcom.keboola
Connect your AI assistants to Keboola and expose your data, transformations, SQL queries, ...
Connects AI assistants to CloudQuell multi-cloud and AI cost, savings, anomaly, and budget data.
Query 40 databases from Claude, ChatGPT, or Cursor — on any device. Read-only, encrypted, audited.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceConnects AI assistants to Supabase projects, enabling them to manage tables, query data, deploy Edge Functions, handle migrations, and access project resources through natural language commands.Apache 2.0

tailpipe-mcpofficial
AlicenseNot gradedqualityDmaintenanceConnects AI assistants to cloud and SaaS logs via Tailpipe, enabling natural language querying and analysis of log data.167Apache 2.0- AlicenseNot gradedqualityAmaintenanceEnables AI assistants to query databases using natural language, with automatic schema discovery and SQL compilation.9953,162Apache 2.0
- AlicenseNot gradedqualityCmaintenanceConnects AI assistants to Turbot Guardrails for natural language exploration, analysis, and automation of cloud governance.154Apache 2.0