The intelligent database layer for AI agents
Open-source MCP server that gives AI agents safe, reliable access to any database — PostgreSQL, MongoDB, SQLite, DuckDB — with cross-database joins, deterministic safety enforcement, and benchmark-proven accuracy.
Connect Claude or GPT to a Postgres URL and three things go wrong in the first week — every time:
The agent guesses the foreign key, the join produces nothing, and no error fires. You only notice when the answer looks empty.
Prompt injection or a model misread, and your write-capable connection is now a liability. Read-only at the prompt level is not enough.
Each conversation burns tokens introspecting your tables and rediscovering relationships you already taught it yesterday.
Built from the failure modes we hit in production. Open source from day one.
Claude, Cursor, Windsurf, GPT — works out of the box in minutes. Standard MCP protocol, no custom integrations.
Not prompted, not policy-checked — parsed. The query never reaches your database if it isn't a SELECT. No prompt override can break it.
DataBridge introspects your databases on startup, caches the schema, and discovers cross-database join keys. Subsequent queries skip the rediscovery overhead.
Query PostgreSQL, MongoDB, SQLite, and DuckDB in one expression. The agent doesn't need to orchestrate multiple round-trips.
EMA, chi-square, regex text extraction — operations that are awkward or wrong in SQL run inside DataBridge with precise, deterministic results.
More engines on the roadmap. The same query interface works regardless of the underlying store.
Benchmark
TBD
on DataAgentBench
Everything the OSS version does, fully hosted — with the missing pieces teams ask for the most.
Skip self-hosting. Connect your agent to a single hosted URL we operate.
Add, edit, and rotate database credentials from a dashboard — not a config file.
Inspect the joins DataBridge inferred. Override or improve them manually when your schema is non-obvious.
Teach the agent your domain language: "users.account_type='Pro' means paid", "never join orders to deleted_users". Persisted across sessions.
Every query your agent ran, every result it received. Debug bad answers by replaying the exact tool call.
One endpoint, multiple users. Centralized credentials, individual audit trails.
Drop your email. We'll let you know the moment hosted endpoints open — no spam, no marketing drip.
Self-hosting today? Star us on GitHub and follow releases.