Skip to Content

QueryPie DAC

Securely access databases through QueryPie platform’s DAC (Data Access Control).

Key Features

  • Database access through QueryPie DAC (Data Access Control)
  • Permission-based database cluster management
  • Secure SQL query execution

Basic Information

Authentication Method

Administrators must set up MCP server configuration in advance. Users authenticate using OAuth.

Input Parameters

  • Server URL (Required): QueryPie domain
  • Authorization URL for OAuth (Required): OAuth authorization URL
  • Token URL for OAuth (Required): OAuth token URL
  • Client ID (Required): OAuth client ID
  • Client Secret (Required): OAuth client secret

You can find these in QueryPie admin page > General Settings > Security > OAuth Settings.

OAuth Integration Guide

This is the procedure to integrate QueryPie with AIP using OAuth. Please follow the steps below.

  1. Access QueryPie and Admin Login
    Access your organization’s QueryPie domain (e.g., https://<your-querypie-domain>) and log in with an administrator account.

  2. Navigate to OAuth Settings
    Go to Admin Page → General Settings → Security → OAuth Settings menu. QueryPie OAuth setting

  3. Copy Client ID and Secret
    Enter Client ID and Copy your Client ID and Client Secret. You will need them in step 5 below.

  4. Enter AIP’s OAuth callback URL
    Enter https://api.app.querypie.com/integration/oauth/callback in the Redirect URI field.

  5. Access AIP and Enter OAuth settings in AIP
    Enter the following values in the QueryPie MCP settings in the MCP Integration Management menu of the AIP administrator page:

    • Server URL: e.g., https://<your-querypie-domain>
    • Client ID (The value you copied in step 3 above)
    • Client Secret (The value you copied in step 3 above) QueryPie OAuth setting

Supported MCP Tools

DAC (Data Access Control) Tools

Manage database access through QueryPie’s data access control functionality.

QueryPie DAC MCP only works with databases that have Proxy Usage option enabled in QueryPie.

list_accessible_db_cloud_providers

Retrieve a list of all available cloud providers.

list_accessible_db_cluster_groups

Retrieve a list of accessible database cluster groups for a specific cloud provider.

Input Parameters:

  • cloudProviderUuid (Required): Cloud provider UUID

list_accessible_db_clusters

Retrieve a list of accessible database clusters for a specific cluster group. You must select a cluster to execute queries.

Input Parameters:

  • clusterGroupUuid (Required): Cluster group UUID

run_db_query

Execute SQL queries on the database.

Input Parameters:

  • clusterUuid (Required): Cluster UUID
  • proxyHost (Required): Proxy host
  • proxyPort (Required): Proxy port
  • query (Required): SQL query to execute

Usage Examples

For example,

  • When you input the prompt “Show me the list of databases accessible through QueryPie”,
  • The LLM will sequentially call list_accessible_db_cloud_providers, list_accessible_db_cluster_groups, and list_accessible_db_clusters tools through QueryPie DAC MCP, then respond based on the results.

Precautions

  • Maintain security through proper permission settings.
  • Follow your organization’s security policies when accessing data.
  • Regularly review access logs.
Last updated on