AKKO MCP server for Trino

akko-mcp-trino

English · Français

<!-- mcp-name: io.github.ab2dridi/akko-mcp-trino -->

Give your AI agents read-only access to Trino, and nothing more.

akko-mcp-trino is an MCP server for Trino. It lets an agent list catalogs, schemas and tables, describe a table, explain a query and run it, and it guarantees that nothing it sends can write: every statement is parsed, and a write anywhere in it is refused before Trino. Every query runs either as the one Trino identity the administrator configured, or as the user the agent acts for, whose own token Trino verifies again. Either way Trino's access control (OPA, Ranger, or Trino's own rules) decides what the agent may read. Results are bounded in rows and in time, and every call leaves one audit line.

Why

An agent that reads a lakehouse needs a small, predictable surface: a few tools whose descriptions a model understands, answers that never run away, and a guarantee that a prompt injection cannot turn a question into a DROP TABLE. This server is that surface, and nothing else. It does not decide access: in jwt mode Trino decides for each user with the rules it already has, and in service mode for the one identity you give it, with the rights every caller of this server may have, no more.

Highlights

Shortened. The full README is on GitHub.