SpotDB

Overview

From the repository's own README, as read at the audited commit.

# SpotDB[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=aliengiraffe_env&metric=alert_status&token=a564584b18c4d708580b4825a1d8c270b18a3f3f)](https://sonarcloud.io/summary/new_code?id=aliengiraffe_env)### Lightweight data sandbox for AI workflows and data exploration, enabled with guardrails and security to keep your data safe.This project provides a lightweight, **ephemeral data sandbox** designed for large language models (LLMs) and agentic workflows. By providing a secure, isolated environment, it allows AI agents and scripts to analyze data without direct access to production databases. This setup prevents accidental data modification, ensures data privacy, and enforces guardrails for safe data exploration.## Features- 🏖️ **Ephemeral Data Sandbox**: Create temporary databases for AI workflows and data exploration.- 📸 **Snapshot**: Capture and store data snapshots, recover point-in-time data states or continue from a previous state.- 🧠 **MCP API**: Access data through a Model Context Protocol for seamless integration with AI models and agentic workflows.- ⚙️ **REST API**: Access data through a RESTful API for integration with traditional systems and workflows.- 🚂 **Guardrails**: Enforce rules and constraints to ensure data safety and privacy.- 🛡️ **Security**: Protect data from unauthorized access and modification.## Quick Start1. Tap the repository and install the package:```bashbrew tap aliengiraffe/spaceship && \\brew install spotdb```2. Start the server:```bashspotdb```3. Upload a CSV file:```bashcurl -X POST \  http://localhost:8080/api/v1/upload \  -F "table_name=mytable" \  -F "has_header=true" \  -F "[email protected]"```4. Query the data:```bashcurl -X POST \  http://localhost:8080/api/v1/query \  -H "Content-Type: application/json" \  -d '{"query": "SELECT * FROM mytable LIMIT 10"}'```5. Setup Claude Code   You must have the `claude` command installed.Then, you can add the `spotdb` mcp:```bashclaude mcp add spotdb -s us

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude mcp add spotdb --env X-API-Key=${X-API-Key} -- docker run -i --rm aliengiraffe/spotdb:v1.3.0

Details

Source

aliengiraffe/spotdb

Transports

stdio · streamable-http

Tools

Registered at runtime; the list could not be read from source.

License

MIT

Stars

21 · pushed 1d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

declared (2 observation(s))

Network

declared (4 observation(s))

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (6)

.air.toml

.golangci.yml

.goreleaser.yaml

.pre-commit-config.yaml

injectionDir := "../../testdata/csv/injection/reject"

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 8f072d09645c · full audit: observations/trust-audit/mcp-server/aliengiraffe__spotdb.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions