Data Studio Agent

Let your AI coding agent securely access all your databases, in plain language.

Local-first. Enterprise-grade security. Open source.

📖 Product Page·npm·dockit·sqlkit·Releases

This repository contains theData Studio MCP Server, aModel Context Protocolserver that gives AI coding agents direct access to your databases through thedockitandsqlkitdesktop apps.

Install and launchdockitand/orsqlkit, add a database connection, and make sureSettings → MCP Bridge → Auto-startis enabled (it is by default). Install both apps for the full SQL + NoSQL tool set.

npm install -g @geek-fun/data-studio-mcp

codex mcp add data-studio -- npx -y @geek-fun/data-studio-mcp

claude mcp add --transport stdio data-studio -- npx -y @geek-fun/data-studio-mcp

{ "mcpServers": { "data-studio": { "command": "npx", "args": ["-y", "@geek-fun/data-studio-mcp"] } } }

Windsurf.Create~/.codeium/windsurf/mcp_config.json(global only):

{ "mcpServers": { "data-studio": { "command": "npx", "args": ["-y", "@geek-fun/data-studio-mcp"] } } }

OpenCode.Add toopencode.json(project) or~/.config/opencode/opencode.json(global):

{ "$schema": "https://opencode.ai/config.json", "mcp": { "data-studio": { "type": "local", "command": ["npx", "-y", "@geek-fun/data-studio-mcp"], "enabled": true } } }

Any other MCP client.Register a stdio server with commandnpxand args-y @geek-fun/data-studio-mcp.

OpenSettings → MCP Bridgein dockit/sqlkit to control what the agent can do:

Use plain language. The agent queries your databases for you:

- "List all tables in my PostgreSQL database"
- "Show me the last 10 orders from the Elasticsearch indexorders*"
- "Find all users older than 30 in MongoDB"
- "Run this query and explain the results"

The agent reads schemas, runs queries, and explores your data, then shows you every query it executed.

The LLM gets broad access to your data, but it never sees your credentials. The policy model gates every capability by risk level.

- Credentials never leave the apps.The LLM only ever sees an opaqueconnection_id. Real credentials are resolved inside dockit/sqlkit and never cross the MCP boundary. Your passwords and keys stay on your machine, in your app.
- ID-based resource access.Agents access databases strictly by connection ID. Credentials never appear in prompts or tool arguments, so there is no path for the model to obtain or exfiltrate connection secrets.
- Three-tier permission model.Read Only / Data Read-Write / Full Access modes gate every capability by risk level, with per-connection overrides. You can mark any connection read-only or allowlist specific actions.
- Explicit user confirmation.Destructive operations (DELETE, DROP, TRUNCATE) surface asAskin the policy. The client prompts the user for explicit confirmation before anything destructive runs.
- Action-level statement classification.SQL is parsed and classified by statement kind (Read / Write / Delete / DDL) before execution. Write-only tools reject DELETE statements; delete tools reject DDL.
- Local-only bridge.The bridge binds to127.0.0.1exclusively. It is unreachable from other machines, with no server to host and no API keys to manage.

All tools follow thedata_studio__{backend}__{action}convention. TheUser confirmationcolumn shows which operations surface an explicit confirmation prompt in your AI client before they run.

code agent (Claude Code / Cursor / OpenCode ...) | | MCP stdio protocol v @geek-fun/data-studio-mcp ← npm package (pure TypeScript) | | HTTP (localhost) +----------------+----------------+ v v | dockit:9120 sqlkit:9121 | (NoSQL bridge) (SQL bridge) | | | | v v | Elasticsearch PostgreSQL | MongoDB MySQL | DynamoDB SQL Server | OpenSearch SQLite |

The MCP server is a thin routing layer. All database drivers, SSH tunnels, and connection management live in the desktop apps, which expose a local HTTP bridge (127.0.0.1only). The MCP server auto-discovers running backends via each app's port file.

This repository also contains thedata-studio-agent Rust framework, the shared AI agent loop (provider adapters, streaming, tool calling, context compaction) that powers the built-in assistants indockitandsqlkit.

Seecrates/data-studio-agent/README.mdfor installation, architecture, and integration guides.

Connects agents to Elasticsearch data, enabling natural language interaction with indices.