Skip to content
mcp/harbor
Gemini CLI

Secure Schema MCP for Gemini CLI

io.github.siddharth-coder13/secure-schema

Read-only MCP server for exposing database schema metadata without row data.

client:Gemini CLI transport:stdio runtime:pypi

Install Secure Schema MCP in Gemini CLI

~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

{
  "mcpServers": {
    "secure-schema": {
      "command": "uvx",
      "args": [
        "mcp-secure-schema"
      ],
      "env": {
        "DATABASE_URL": "<DATABASE_URL>",
        "DATABASE_SCHEMA": "<DATABASE_SCHEMA>",
        "ALLOWED_TABLES": "<ALLOWED_TABLES>",
        "SECURE_SCHEMA_ENV": "<SECURE_SCHEMA_ENV>",
        "FASTMCP_CHECK_FOR_UPDATES": "<FASTMCP_CHECK_FOR_UPDATES>",
        "FASTMCP_SHOW_SERVER_BANNER": "<FASTMCP_SHOW_SERVER_BANNER>"
      }
    }
  }
}

Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs

Secure Schema MCP in other clients

Secure Schema MCP MCP server