Announcing Beacon: Self-improving memory for coding agents
← All MCP servers
MCP server

io.github.ashishsinha1602/schemagate

mcp:ashishsinha1602/schemagate

Identity-scoped schema selection for text-to-SQL. Returns only the tables the caller may read.

Verdict
Not analyzed

Indexed from the registries, but not analyzed yet. Lineage and listings below are current.

Package advisories 9

Known vulnerabilities and malicious-package reports (OSV) for the packages it installs or runs.

criticalGHSA-5wvp-7f3h-6wmmPyPI/pyarrow
PyArrow: Arbitrary code execution when loading a malicious data file
No version pinned · fixed in 14.0.1 · BENCHMARKS.md:1180
criticalGHSA-38fc-9xqv-7f7qPyPI/sqlalchemy
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
No version pinned · fixed in 1.2.19 · pyproject.toml
criticalGHSA-887w-45rq-vxgfPyPI/sqlalchemy
SQLAlchemy vulnerable to SQL Injection via order_by parameter
No version pinned · fixed in 1.3.0b3 · pyproject.toml
criticalGHSA-hfg2-wf6j-x53pPyPI/sqlalchemy
SQLAlchemy vulnerable to SQL injection
No version pinned · fixed in 0.7.0b4 · pyproject.toml
highGHSA-8cw2-jv5c-c825PyPI/pyarrow
Missing Initialization of Resource in Apache Arrow
No version pinned · fixed in 0.15.1 · BENCHMARKS.md:1180
highGHSA-cjw4-2w9r-r8mvPyPI/pyarrow
Missing Initialization of Resource in Apache Arrow
No version pinned · fixed in 0.15.1 · BENCHMARKS.md:1180
highGHSA-rgxp-2hwp-jwggPyPI/pyarrow
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
No version pinned · fixed in 23.0.1 · BENCHMARKS.md:1180
PYSEC-2020-73PyPI/pandas
No version pinned · fixed in 1.0.4 · BENCHMARKS.md:1180
PYSEC-2024-161PyPI/pyarrow
No version pinned · fixed in 801de2fbcf5bcbce0c019ed4b35ff3fc863b141b, 17.0.0 · BENCHMARKS.md:1180

Execution chain 500

What it calls, runs, installs, reads and writes, with the line that does it.

Environment variables 176

<dynamic>
<dynamic>
ADB_VERSION
ADMIN_PASSWORD
ANTHROPIC_API_KEY
ANTHROPIC_API_KEY
ANTHROPIC_API_KEY
ANTHROPIC_API_KEY
BIRD_DIR
BIRD_EVIDENCE
BIRD_SAMPLE
BIRD_TOP_K
GEMINI_API_KEY
GOOGLE_API_KEY
KC_BOOTSTRAP_ADMIN_PASSWORD
LOCK_UPGRADE
NAMECHECK_TERMS
OCI_CLI_AUTH
OCI_CLI_PROFILE
OCI_CLI_REGION
OCI_COMPARTMENT_ID
OCI_COMPARTMENT_ID
OCI_COMPARTMENT_ID
benchmarks/results/bird_dev/schemagate_bird_submission.zip!/bird_run.py:251 · read
OCI_COMPARTMENT_ID
OCI_COMPARTMENT_ID
OCI_COMPARTMENT_ID
OCI_COMPARTMENT_ID
OCI_REGION
OCI_TENANCY
OCI_TENANCY
OPENAI_API_KEY
SCHEMAGATE_ADB_DSN
SCHEMAGATE_ADB_DSN
SCHEMAGATE_ATP_ENV
SCHEMAGATE_AUTO_DESCRIBE
SCHEMAGATE_AUTO_EMBEDDER
SCHEMAGATE_AUTO_EMBEDDER
SCHEMAGATE_AUTO_EMBEDDER
SCHEMAGATE_CATALOG_CONFIG
SCHEMAGATE_CATALOG_CONFIG
SCHEMAGATE_CATALOG_CONFIG
SCHEMAGATE_CATALOG_CONFIG
SCHEMAGATE_CATALOG_MAX_AGE
SCHEMAGATE_CONNECT_ARGS
SCHEMAGATE_DATABASE_URL
SCHEMAGATE_DATABASE_URL
SCHEMAGATE_DATABASE_URL
SCHEMAGATE_DATABASE_URL
SCHEMAGATE_DATABASE_URL
SCHEMAGATE_DATABASE_URL
SCHEMAGATE_HF_BASE_URL
SCHEMAGATE_HOME
SCHEMAGATE_HOME
SCHEMAGATE_HOME
SCHEMAGATE_HOME
SCHEMAGATE_LIVE_LOCAL
SCHEMAGATE_LOCAL_BASE_URL
SCHEMAGATE_LOG_LEVEL
SCHEMAGATE_LOG_LEVEL
SCHEMAGATE_MCP_HOST
SCHEMAGATE_MCP_HOST
SCHEMAGATE_MCP_MODEL
SCHEMAGATE_MCP_PORT
SCHEMAGATE_MCP_PORT
SCHEMAGATE_MCP_PROVIDER
SCHEMAGATE_MCP_TRANSPORT
SCHEMAGATE_MSSQL_URL
SCHEMAGATE_MYSQL_URL
SCHEMAGATE_MYSQL_URL
SCHEMAGATE_MYSQL_URL
SCHEMAGATE_OCI_MODEL
SCHEMAGATE_ORACLE_DSN
SCHEMAGATE_ORACLE_PASSWORD
SCHEMAGATE_ORACLE_PROXY
SCHEMAGATE_ORACLE_PROXY
SCHEMAGATE_ORACLE_PROXY
SCHEMAGATE_ORACLE_PROXY
SCHEMAGATE_ORACLE_PROXY
SCHEMAGATE_ORACLE_URL
SCHEMAGATE_ORACLE_USER
SCHEMAGATE_PG_URL
SCHEMAGATE_PG_URL
SCHEMAGATE_PG_URL
SCHEMAGATE_POSTGRES_URL
SCHEMAGATE_POSTGRES_URL
SCHEMAGATE_QUESTION
SCHEMAGATE_REMEMBER
SCHEMAGATE_REREAD_TIMEOUT
SCHEMAGATE_STUDIO_HOST
SCHEMAGATE_STUDIO_LOG
SCHEMAGATE_STUDIO_PORT
SCHEMAGATE_VALUES
SCHEMAGATE_VALUES_BUDGET
SCHEMAGATE_WALLET
SCHEMAGATE_WALLET
SG_CANDIDATES
SG_TEST_UNSET_SECRET
SGBENCH_CACHE
SGBENCH_PASSWORD
SGBENCH_PASSWORD
SGBENCH_PASSWORD
SGBENCH_PG_URL
SGBENCH_PG_URL
SGBENCH_PG_URL
SGBENCH_PG_URL
SGE_ADMIN_URL
SGE_ADMIN_URL
SGE_ENGINE
SGE_ENGINE
SGE_EXTRA
SGE_SERVER_URL
SITE_SINCE
SPIDER2_MAX_GB
SPIDER2_NO_DESC
SPIDER2_SNOWFLAKE_CREDENTIAL
SPIDER2_TOP_K
UNIQL_ORACLE_DSN
UNIQL_ORACLE_DSN
UNIQL_ORACLE_PASSWORD
UNIQL_ORACLE_PASSWORD
WALLET_PASSWORD
WALLET_PASSWORD

Commands run 85

__import__('sqlalchemy')
__import__("re")
__import__("re")
benchmarks/results/bird_dev/schemagate_bird_submission.zip!/bird_run.py:296 · dynamic_code
__import__("run_paraphrase_eval")
__import__("schemagate.catalog")
__import__("schemagate")
__import__("schemagate")
__import__(mods[key])
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
tests/keycloak_e2e.py:316 · via:start_server
<dynamic>
<dynamic>
<dynamic>
tests/test_docker.py:35 · via:_index_mode
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
$SSH "sudo bash -lc 'set -a; . /etc/schemagate.env; set +a; /opt/schemagate/bin/python -c \"
oci/stack/verify.sh:215 · dynamic_code
$SSH "sudo cat /etc/schemagate/catalog.json" 2>/dev/null | python3 -c '
oci/stack/verify.sh:230 · pipe_to_shell
$SSH "sudo cat /etc/schemagate/catalog.json" 2>/dev/null | python3 -c '
oci/stack/verify.sh:230 · dynamic_code
code="$(curl -sS --max-time 8 -o /dev/null -w '%{http_code}' "http://$IP:8765/mcp" 2>/dev/null)"
oci/stack/verify.sh:194 · dynamic_code
errs() { oci resource-manager job get-job-logs-content --job-id "$1" | python3 -c 'import sys; sys.stdout.write(sys.stdin.read().replace("\\n", "\n"))' | grep -i -E '\[error\]|error:|Suggestion:|Request Target:' | tail -30; }
oci/stack/verify.sh:46 · dynamic_code
errs() { oci resource-manager job get-job-logs-content --job-id "$1" | python3 -c 'import sys; sys.stdout.write(sys.stdin.read().replace("\\n", "\n"))' | grep -i -E '\[error\]|error:|Suggestion:|Request Target:' | tail -30; }
oci/stack/verify.sh:46 · pipe_to_shell
get_multi_columns
get_multi_foreign_keys
get_multi_pk_constraint
get_multi_table_comment
git -C {…} ls-files *.py
git {…}
git log -1 --format=%cs -- {…}
git log -1 --format=%cs -- {…}
git ls-files -s -- {…}
git merge-base --is-ancestor {…} {…}
git rev-parse --is-inside-work-tree
git rev-parse --is-inside-work-tree
git rev-parse HEAD
have="$(python3 -c 'import json,urllib.request as u;print(json.load(u.urlopen("https://pypi.org/pypi/schemagate/json"))["info"]["version"])' 2>/dev/null)"
importlib.import_module(fixture)
MCP_URL="$(python3 -c 'import json,sys;print(json.load(open(sys.argv[1]))["outputs"]["mcp_url"]["value"])' "$WORK/state.json")"
oci/stack/verify.sh:185 · dynamic_code
MYIP="$(curl -fsS --max-time 20 https://ifconfig.me)"
oci/stack/verify.sh:104 · dynamic_code
pickle.loads(cache.read_bytes())
pickle.loads(cache.read_bytes())
rev-parse
rev-parse
ssh -i "$KEY" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ConnectTimeout=15 "opc@$IP" "ls -l /opt/schemagate/.ready 2>&1; sudo tail -3 /var/log/schemagate-resolve-db.log 2>&1; echo '-- cloud-init:'; sudo cloud-init status --long 2>&1 | head -5; ec
ssh -i "$KEY" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ConnectTimeout=15 "opc@$IP" "ls -l /opt/schemagate/.ready 2>&1; sudo tail -3 /var/log/schemagate-resolve-db.log 2>&1; echo '-- cloud-init:'; sudo cloud-init status --long 2>&1 | head -5; ec
ssh -i "$KEY" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ConnectTimeout=15 "opc@$IP" "ls -l /opt/schemagate/.ready 2>&1; sudo tail -3 /var/log/schemagate-resolve-db.log 2>&1; echo '-- cloud-init:'; sudo cloud-init status --long 2>&1 | head -5; ec
VERSION="${VERSION:-$(curl -fsSL https://raw.githubusercontent.com/ashishsinha1602/schemagate/main/oci/stack/schema.yaml 2>/dev/null | sed -nE 's/^version: *"([^"]+)".*/\1/p' | head -1)}"

Files read 239

- path: /etc/systemd/system/schemagate.service
<dynamic>
<dynamic>
<dynamic>
<dynamic>
benchmarks/join_paths.py:56 · via:parse_schemas
<dynamic>
benchmarks/learn_concepts.py:40 · via:parse_schemas
<dynamic>
<dynamic>
<dynamic>
benchmarks/rerank_public.py:46 · via:parse_schemas
<dynamic>
benchmarks/results/bird_dev/schemagate_bird_submission.zip!/bird_run.py:227 · read
<dynamic>
benchmarks/results/bird_dev/schemagate_bird_submission.zip!/bird_run.py:232 · read
<dynamic>
benchmarks/results/bird_dev/schemagate_bird_submission.zip!/bird_run.py:235 · read
<dynamic>
benchmarks/results/bird_dev/schemagate_bird_submission.zip!/bird_run.py:244 · read
<dynamic>
<dynamic>
benchmarks/spider.py:99 · via:parse_schemas
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
src/schemagate/cli.py:424 · via:load_verifier
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
src/schemagate/ontology_io.py:160 · via:_load_yaml_or_json
<dynamic>
<dynamic>
<dynamic>
src/schemagate/pq.py:150 · via:load_signer
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
studio/islands.py:28 · via:__init__
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
tests/bench.py:227 · via:read
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
tests/test_pq_audit.py:22 · via:load_verifier
<dynamic>
tests/test_pq_audit.py:22 · via:load_signer
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
tests/test_pq_audit.py:102 · via:load_signer
<dynamic>
<dynamic>
tests/test_pq_audit.py:113 · via:load_verifier
<dynamic>
<dynamic>
tests/test_pq_audit.py:127 · via:load_signer
<dynamic>
<dynamic>
tests/test_pq_audit.py:189 · via:load_signer
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>
<dynamic>

Linked repositories 15

GitHub repositories it links to or installs from, and whether their names can be taken over.

bird-bench/mini_dev
url · not tracked
canner/wrenai
url · no ownership changes
dcposch/blakejs
url · not tracked
deeplethe/ontology2sql
url · not tracked
eosphoros-ai/db-gpt
url · not tracked
example/releases
url · not tracked
jerrygao818/uniql
url · not tracked
ramiawar/dataline
url · not tracked
sheltercosmo/jev4pg
url · not tracked
vanna-ai/vanna
url · not tracked
xlang-ai/spider2
url · not tracked