QueryPie SAC

Securely access servers through QueryPie platform’s SAC (Security Access Control).

Key Features

• Server access through QueryPie SAC (Security Access Control)
• Permission-based server management
• Secure server command execution

Basic Information

Authentication Method

Administrators must set up MCP server configuration in advance. Users authenticate using OAuth.

Input Parameters

• Server URL (Required): QueryPie domain
• Authorization URL for OAuth (Required): OAuth authorization URL
• Token URL for OAuth (Required): OAuth token URL
• Client ID (Required): OAuth client ID
• Client Secret (Required): OAuth client secret

OAuth Integration Guide

This is the procedure to integrate QueryPie with AIP using OAuth. Please follow the steps below.

1. Access QueryPie and Admin Login
   Access your organization’s QueryPie domain (e.g., https://<your-querypie-domain>) and log in with an administrator account.

2. Navigate to OAuth Settings
   Go to Admin Page → General Settings → Security → OAuth Settings menu.

3. Copy Client ID and Secret
   Enter Client ID and Copy your Client ID and Client Secret. You will need them in step 5 below.

4. Enter AIP’s OAuth callback URL
   Enter https://api.app.querypie.com/integration/oauth/callback in the Redirect URI field.

5. Access AIP and Enter OAuth settings in AIP
   Enter the following values in the QueryPie MCP settings in the MCP Integration Management menu of the AIP administrator page:

   • Server URL: e.g., https://<your-querypie-domain>
   • Client ID (The value you copied in step 3 above)
   • Client Secret (The value you copied in step 3 above)

Supported MCP Tools

SAC (Security Access Control) Tools

Manage server access through QueryPie’s security access control functionality.

list_accessible_server_roles

Retrieve a list of all accessible server roles. You must select a role to use in subsequent commands.

list_accessible_server_groups

Retrieve a list of all accessible server groups.

Input Parameters:

• roleUuid (Required): Role UUID

list_accessible_servers

Retrieve a list of all accessible servers.

Input Parameters:

• roleUuid (Required): Role UUID
• serverGroupUuid (Required): Server group UUID

list_server_accounts

Retrieve a list of server accounts. This is a list of all accounts that can be used to connect to the server.

Input Parameters:

• roleUuid (Required): Role UUID
• serverUuid (Required): Server UUID

run_server_command

Execute commands on the server.

Input Parameters:

• roleUuid (Required): Role UUID
• host (Required): Server host
• port (Required): Server port
• username (Required): Username
• command (Required): Command to execute

Usage Examples

For example,

• When you input the prompt “Show me the list of servers accessible through QueryPie”,
• The LLM will sequentially call list_accessible_server_roles, list_accessible_server_groups, and list_accessible_servers tools through QueryPie SAC MCP, then respond based on the results.

Precautions

• Maintain security through proper permission settings.
• Follow your organization’s security policies when accessing servers.
• Regularly review access logs.