io.github.cabbageandtea/sqlguard — MCP SQLGuard Server

The MCP server “io.github.cabbageandtea/sqlguard” authorizes SQL with Ed25519 certificates before an agent writes to a database. The provided description indicates it uses instant certificates or prepaid credits ($0.05) as part of the authorization flow.

🛠️ Key Features

SQL authorization gated by Ed25519 certs
Authorization performed before agent DB writes
Instant certificate option and prepaid credits ($0.05)

🚀 Use Cases

Preventing or controlling agent database write operations
Issuing/validating Ed25519-backed authorization for SQL execution

⚡ Developer Benefits

Clear enforcement point: SQL authorization prior to DB writes
Integrates certificate-based verification into the agent-to-database path

⚠️ Limitations

Only the authorization behavior for SQL before DB writes is described; no additional tooling details are provided.

SQLGuard

Live. Execution Certificate Firewall for autonomous SQL writers.

Agents that mutate production SQL get an Ed25519 Execution Certificate before they write — Instant Cert ($0.05 Exact) or prepaid x402 USDC credits on Base. Lint is not authorization.


Canonical	https://sqlguard.io
Alias (Fly)	https://sqlguard-io.fly.dev
Instant Cert ($0.05)	`POST /v1/cert`
Volume micro ($0.10)	`POST /v1/credits/buy/micro`
Collect	https://sqlguard.io/v1/collect
Catalog	https://sqlguard.io/v1/catalog
Need	https://sqlguard.io/NEED.md
Money	https://sqlguard.io/money
MCP	`POST /mcp` · `sqlguard_cert` · `io.github.cabbageandtea/sqlguard`
Smithery	https://smithery.ai/servers/malik-lomax/sqlguard
Proof	https://sqlguard.io/PROOF.md

Pay-to (Base USDC): 0xC8d524703f1751b565a220087D1d4c44a413C1D7

No early access. No waitlist. Open for settlement.

Loop

code

Instant Cert: POST /v1/cert → settle $0.05 → verify → execute
OR volume: catalog → buy (402 → settle) → validate → verify → execute

Quick smoke

bash

curl -sS https://sqlguard.io/health
curl -sS https://sqlguard.io/v1/collect
curl -sS -X POST https://sqlguard.io/v1/cert \
  -H 'content-type: application/json' \
  -H 'X-SQLGuard-Agent: demo-agent' \
  -d '{"schema_ddl":"CREATE TABLE t(id int);","sql":"INSERT INTO t VALUES (1);","agent_id":"demo-agent"}' -D - -o /dev/null
# Expect: HTTP 402 + payment-required header

Or: node scripts/smoke.mjs

Stack

TypeScript · Express · @x402/* · Postgres sandbox · Ed25519 attestations · CDP/PayAI facilitator · Fly.io

Legal

/terms /privacy /aup · Contact: hello@doggybagg.cc

License

MIT

need	string	optional	What you need in one sentence (e.g. 'authorize one INSERT', 'bind human Intent Mandate', 'burst of 5 writes', 'prepaid credits', 'portable gate before execute')
agent_id	string	optional	Optional agent or wallet id for routing context

bundle	string	required	Credit bundle to purchase: micro ($0.10), starter, builder, or team
agent_id	string	required	Agent or wallet id that will own the purchased credits after x402 settlement

agent_id	string	required	Agent or wallet id for the probe receipt
sql	string	required	Mutating SQL to risk-score (not authorize)
schema_ddl	string	optional	Optional schema snapshot

agent_id	string	required	Agent or wallet id for the bind receipt
mandate	string	required	AP2-style Intent Mandate — what the human authorized this agent to do
schema_ddl	string	required	CREATE TABLE … schema snapshot
sql	string	required	Exact mutating SQL to authorize under the mandate

certificate	object	required	Execution Certificate from Instant Cert or Mandate Bind
signature	string	required	Ed25519 signature
sql	string	required	Exact SQL about to execute (must match sql_hash)
mandate	string	optional	Required when certificate.mandate_kind is abmp_intent
schema_ddl	string	optional	Optional schema — checks schema_hash when provided

SQLGuard

io.github.cabbageandtea/sqlguard — MCP SQLGuard Server

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

sqlguard_affiliate

sqlguard_sdk

sqlguard_handshake

sqlguard_catalog

sqlguard_buy

sqlguard_probe

sqlguard_cert

sqlguard_bind

sqlguard_gate

sqlguard_require

sqlguard_protocol

sqlguard_session

sqlguard_validate

sqlguard_verify

sqlguard_balance

SQLGuard

Loop

Quick smoke

Stack

Legal

License

Install

Remote endpoint