Back to Tool
S

Schemagate

Tool Oct 19, 2026

Python library and MCP server that scopes text-to-SQL schema selection to caller permissions, with OAuth identity on its HTTP transport from version 1.9.0.

Visit primary link 2 sources attached
Schemagate author's demo shows the compensation table as the top schema match after granting the payroll role.
Full-frame still from the author's version-pinned demo animation, using a bundled example schema. It illustrates schema selection after a role grant, not the new OAuth login flow, a live payroll database or an AITrending benchmark; displayed token counts are demo values. Source: Ashish Sinha / Schemagate
agent-ecosystemagent-securityai-agentsself-hosted

What happened lately

Schemagate timeline

Schemagate filters a reflected database catalog by the caller’s permissions before selecting schema for a text-to-SQL prompt. It offers a Python library, an MCP server and a LangChain integration. The project documents PostgreSQL, Oracle, MySQL, SQL Server and SQLite workflows.

Version 1.9.0 adds OAuth resource-server support to the MCP HTTP transport. With OAuth enabled, identity and roles come from a signed JWT or a configured directory resolver rather than client tool arguments. The release documents local-provider tests and explicitly distinguishes them from hosted-tenant validation.

The Apache-2.0 package needs Python 3.10 or later. The default selector is offline; optional model-assisted answering and descriptions depend on the selected model provider. Operators must configure database credentials, identity-provider settings for OAuth, and catalog refresh behavior appropriate to permission changes.