mcpField
M
Midplane

Midplane

Local
midplane.aiDatabases5Updated today
RepositoryVisit website

About Midplane

Midplane is an MCP gateway between AI agents and Postgres that checks policy and records each statement before execution. It supports granted table access, source-level column masking, human approval for writes, and containment after untrusted reads.

Key features

  1. 01Parse and check SQL policy before execution
  2. 02Grant access to selected database tables
  3. 03Mask columns at the source
  4. 04Hold writes for human approval
  5. 05Hash-chained audit log and verification

Use cases

  1. 01Limit which database tables an agent can query
  2. 02Review agent-initiated database writes
  3. 03Export and verify database access records

MCP support

Midplane acts as an MCP server between AI agents and Postgres, applying policy to statements and recording their execution.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "ai-midplane-midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane"
      ],
      "env": {
        "MIDPLANE_TOKEN": "<MIDPLANE_TOKEN>"
      }
    }
  }
}
Run commandnpx -y midplane
Environment variables to set
MIDPLANE_TOKENSecretA token from `midplane token`, verified at start and on every call. It stays in this entry, so give it a --ttl (seconds) as long as the entry should work: the default is an hour.

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmmidplane0.24.1

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

midplane

The Midplane gateway: an MCP server that sits between AI agents and your Postgres databases. Every statement an agent sends is parsed, checked against a policy and recorded before it runs. Agents get table access you grant, masked columns, writes held for a person's approval, and containment once they read untrusted content. It runs next to your databases; nothing connects in to it but agents.

npx midplane --version

Node 24.16 or newer.

  • Local mode (midplane local): the policy lives in a YAML file and tokens come from midplane token. Try it with the quickstart.
  • Linked mode (midplane gateway): policy, identities, approvals and a query log come from Midplane Cloud, over a link the gateway opens. midplane setup makes one: it asks for each database's connection string, tests it, writes the gateway's folder, enrolls and starts it.
  • The audit log stays on the gateway's disk, hash-chained: midplane audit export and midplane audit verify.

Documentation: https://midplane.ai/docs. The image: ghcr.io/midplaneai/midplane. Both are signed: see verifying a release.

MIT licensed.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.