greptimedb-mcp-server

The server implements a robust `security_gate` to block dangerous SQL operations (DDL, DML, dynamic SQL, file system access, encoded content) and enforces read-only access for core query tools. Sensitive data masking is applied based on configurable column name patterns. Input validation functions are used for all tool parameters to prevent injection. HTTP API calls for pipeline management (create, dryrun, delete) require authentication. While `exec()` is used for dynamic prompt registration, it's highly controlled, constructing a fixed function template and only performing string replacement for variables, which mitigates typical `exec()` risks. DNS rebinding protection and audit logging are configurable.