Cockroach Labs CockroachDB MCP Server

Cockroach Labs's CockroachDB MCP server enables AI agents to connect to CockroachDB distributed SQL clusters, inspect database schemas, and execute SQL queries. It allows agents to analyze query execution plans, list cluster nodes and running queries, and inspect databases, tables, and SQL users.

Start for free

Benefits with Ory + Cockroach Labs CockroachDB MCP Server

Cockroach Labs' CockroachDB MCP server lets your agents connect to CockroachDB clusters, explore schemas, run SQL, and inspect cluster health and running queries. SQL from an agent runs against real data. Ory Agent Security lets analysis agents explore schemas and cluster health while SQL access stays with the agents you approve, and every tool call is tied to the user behind it.

View on GitHub

Use Cases

— 01 use case

Agent IAM

Reporting agents query at Read, backfill agents write rows at Write, row deletion is kept at Admin, and Block covers everyone else.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the CockroachDB MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for agents exploring schemas and cluster health, write for application agents that write rows, admin for database owners' agents, and no access for agents that shouldn't reach your clusters.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied delete stops before it reaches CockroachDB, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents run SQL and on whose behalf without blocking anything, so you can apply Ory's pre-built policy for the CockroachDB MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the CockroachDB MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent changed data and for which user.