Skip to content
mcp/harbor
Windsurf

Secure Schema MCP for Windsurf

io.github.siddharth-coder13/secure-schema

Read-only MCP server for exposing database schema metadata without row data.

client:Windsurf transport:stdio runtime:pypi

Install Secure Schema MCP in Windsurf

~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

{
  "mcpServers": {
    "secure-schema": {
      "command": "uvx",
      "args": [
        "mcp-secure-schema"
      ],
      "env": {
        "DATABASE_URL": "<DATABASE_URL>",
        "DATABASE_SCHEMA": "<DATABASE_SCHEMA>",
        "ALLOWED_TABLES": "<ALLOWED_TABLES>",
        "SECURE_SCHEMA_ENV": "<SECURE_SCHEMA_ENV>",
        "FASTMCP_CHECK_FOR_UPDATES": "<FASTMCP_CHECK_FOR_UPDATES>",
        "FASTMCP_SHOW_SERVER_BANNER": "<FASTMCP_SHOW_SERVER_BANNER>"
      }
    }
  }
}

Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs

Secure Schema MCP in other clients

Secure Schema MCP MCP server