Feinian WebSql MCP

Endpoints

Authentication

Send Authorization: Bearer <QueryApi.ServiceToken> on MCP requests. The MCP endpoint reuses the same bearer token as the existing POST /query API.

Browser origin policy

Requests without an Origin header are allowed. If an Origin header is present, it must match one of the configured Mcp:AllowedOrigins values.

No browser origins are currently configured. Requests that send an Origin header will be rejected until Mcp:AllowedOrigins is populated.

Tools

• list_projects: list configured project contexts and their target counts.
• get_project_context: inspect one project's note and member databases; database names are unique within this project.
• list_databases: list configured target data sources without exposing connection strings. Names may repeat across projects.
• query_data_source: run a single safe provider-specific read-only request with required project and return rows, meta, and auditId.
• query_project: run ordered multi-step project queries and return per-step results, auditIds, and one orchestrationId.
• list_query_audits: browse recent success, failure, and rejection audit records.
• get_query_audit: fetch the full detail for one audit entry by ID.

Resources

• websql://policy/query-safety: the enforced provider safety and execution limit policy.
• websql://projects/catalog: current project catalog in JSON form.
• websql://projects/{project}/context: one project context with database membership.
• websql://databases/catalog: current target database catalog in JSON form.

Client Config Example

The exact file shape depends on your MCP host, but a generic remote-server entry typically looks like this:

{
  "servers": {
    "websql": {
      "type": "remote",
      "url": "https://websql.feinian.net/mcp",
      "headers": {
        "Authorization": "Bearer <QueryApi.ServiceToken>"
      }
    }
  }
}

query_data_source input example

The project field is required. The same database name can exist in multiple projects.

{
  "project": "payments-core",
  "database": "reporting",
  "provider": "postgresql",
  "operation": "sql",
  "payload": {
    "text": "select * from user_provider_supply_binding where user_id = @userId and lower(provider_name) = 'openai'",
    "params": {
      "userId": 123
    },
    "queryCategory": "data"
  }
}

server.json Preview

This same payload is available at https://websql.feinian.net/docs/mcp/server.json.

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "abc.red/websql",
  "title": "Feinian WebSql",
  "description": "Remote read-only MCP access to WebSql multi-provider query execution, target catalog, and query audit data.",
  "version": "1.0.0\u002Bfe1ec3aff8a3a78a1002935e2866c896621c6435",
  "remotes": [
    {
      "type": "streamable-http",
      "url": "https://websql.feinian.net/mcp",
      "headers": [
        {
          "name": "Authorization",
          "description": "Required. Use the format: Bearer \u003CQueryApi.ServiceToken\u003E.",
          "isRequired": true,
          "isSecret": true
        }
      ]
    }
  ]
}