QueryAPIGate

MCP · AI agentsYour databases, in Claude, Cursor and your own agents

Connect your AI apps →

Start hereConnect your AI appsWhat it does, at a glance, and how to connect a client The serverMCP server for AI agentsWhat agents get, what they never get, and every tool Use caseAI agentsLet an agent query your data, governed like an app Measured againstThe agent-safety checklistAltinity’s nineteen recommendations, point by point: 16 covered ReferenceMCP referenceTools, resources, OAuth and every setting Try itPlaygroundEvery front door, MCP included, in your browser

Guides for agentsLet an agent call your queries Explore the schema and run ad-hoc SQL Hide personal data from an agent Sign in through your identity provider Tell agents what your data means Writes, with a person approving each All the agent guides →

Any MCP client over Streamable HTTP, for exampleClaudeCursorCopilotLangChainPython SDK

FeaturesEverything it does, section by section

All features →

Connect and governDatabases Security and access MCP for AI agents

BuildSaved queries Parameters Response formats Paging and streaming

Serve and operateCaching Rate limiting Observability OpenAPI

Console and proofAdministration UI Testing and quality Every request

Features: one gate, every front door →Integrations Playground

Use casesTwelve jobs people hire QueryAPIGate for

All twelve, with the shape of each call →

Product teamsCustomer analyticsAnalytics in your product, one tenant at a time Product teamsInternal toolsBack an internal app without a backend team Product teamsControlled writesLet a partner or a form write, through one approved query Partners and pipelinesPartner data APIHand a partner one query, not your schema Partners and pipelinesScheduled deliveriesDeliver a daily file, incrementally, to someone else's bucket Partners and pipelinesLive dashboardsA live view of what is being queried, by whom Data teamsSelf-serve dataData for every team, without handing out the database Data teamsFiles as an APITurn a bucket of Parquet into a queryable API Data teamsLegacy databasesA governed API in front of a database you can't change AIAI agentsLet an agent query your data, governed like an app Security and platformCompliance and auditAnswer the auditor from the running system Security and platformPlatform teamsRun it like the rest of your platform

DeployThree reference architectures, each one tested in CI

Overview and comparison →

Start hereSingle instanceOne container or process; SQLite on a volume, or PostgreSQL.Several instancesHigh availabilityA shared PostgreSQL store and Redis, so any instance answers any request.Helm chartKubernetesOne pod on SQLite, or several behind a disruption budget.MeasuredBenchmarks by shapeWhat each shape and add-on has been measured to serve.

Choose your shape Production checklist Install options Deployment guide

Single instance High availability Kubernetes Benchmarks by shape

DocumentationReference for every setting, endpoint and promise

All documentation →

Run itInstallation and setup Configuration Deployment Database connections

ReferenceAPI reference MCP server Features Example APIs Query metadata A tour of the Console

PerformancePerformance and sizing OLTP benchmark on PostgreSQL What a governed call costs One MySQL server, six services

SecurityThreat model Standards and specifications Where data goes Security policy Architecture overview Questionnaire answers SBOM and verification

ProjectWhy QueryAPIGate Technology stack Contributing Code of conduct

Docs: how the pieces fit, and where to start →FAQ Glossary

FAQ Glossary

How-to guides65 how-to guides, each run against a real server

All 65 guides, with times and outcomes →

Reading pathsStart hereThe first five, in order: a query, a database, an API key.01 → 05 · 5 guides · ≈42 min Give a partner an APIOne query, hashed columns, limits, an expiry, a rotation plan.13 → 50 · 7 guides · ≈53 min Let agents inMCP tools, what the data means, and writes a person approves.24 → 49 · 5 guides · ≈85 min Ship data outFiles as an API, scheduled deliveries, a live feed of runs.41 → 28 · 4 guides · ≈65 min Go to productionThe Deploy page checklist, as guides.23 → 59 · 8 guides · ≈135 min

By topicStart6 Queries7 Access13 Agents7 Events and exports6 Operate17 Govern8

New here? · Guide 01 · 10 minTurn your first SQL query into a REST APIA real HTTP endpoint, backed by your own SQL, with typed parameters, and no controller code written by hand.Start guide 01 →Or try it in the Playground first →

By part of the architecture

Who calls Front doors The governed core Asks Your data Reports to

EvaluateWhat an evaluation asks for: fit, security and proof

Start at the Trust center →

IntegrationsThe databases, identity providers, secret stores, clients and tools it works with, and how each is tested.CompareAgainst a hand-rolled API and the other ways to put a database behind an endpoint.PerformanceWhat a governed call costs on PostgreSQL: throughput, latency under load, scale-out and a sizing rule.Performance on MySQLOne server, a database per microservice, per-user queries across them: cost, sizing and isolation.Benchmarks by shapeWhat each shape and add-on has been measured to serve.Trust centerWhere data goes, what you can verify yourself, and how to report a vulnerability.EnterpriseIdentity, audit, availability, cryptography and the downloadable security pack.SecurityWhat each layer defends against, and the hardening checklist before go-live.Standards and specificationsThe twenty-five RFCs and specifications it is built on, each with what it is used for.

Integrations Compare Performance Performance on MySQL Benchmarks by shape Trust center Enterprise Security Standards and specifications Blog About Playground AnanthaRajuC/QueryAPIGate

{{ backLabel }}

{{ rg.label }}

{{ s.num }}{{ s.title }}

{{ post.cat }}{{ post.topic }}{{ post.version }}

{{ title }}

{{ post.summary }}

{{ post.when }}

Download as PDF{{ pa.pdf.desc }}

{{ it.title }} ↗{{ it.desc }}

{{ kindLabel }} · {{ catLabel }}

{{ title }}

View on GitHub ↗Suggest an edit ↗

Download as PDF{{ pa.pdf.desc }}

{{ it.title }} ↗{{ it.desc }}

{{ error }}

{{ prevLabel }}{{ prev.title }}

{{ nextLabel }}{{ next.title }}

On this page

Back to top ↑

QueryAPIGate

One governed gate between your databases and everything that asks them for data. Self-hosted: your data never leaves your infrastructure.

Self-hostedApache-2.0Signed releases + SBOMFIPS-approved cryptoPython 3.11+

Install → Latest release → MCP server →

ProductFeatures Use cases Integrations Playground Deploy Compare Roadmap Changelog

ResourcesDocs FAQ Glossary How-to guides API reference MCP server Full reference site Blog

TrustTrust center Enterprise Security Support and versions Where data goes Threat model Report a vulnerability

ProjectAbout Built with GitHub X (Twitter)Discord Releases Docker Hub Contributing Code of conduct Licence (Apache-2.0)

© 2026 QueryAPIGate · Apache-2.0 · Experimental features are labelled in the product and the changelog.