Altr MCP server

Read from the package source without running it. The installed server may list more.

• add_classifiers_to_collection

  Add classifiers to an existing collection.

• add_rules

  Add one or more masking rules to a policy in a single batch request.

• approve_access_request

  Approve a pending access request.

• archive_report_definition

  Archive (soft-delete) an audit report definition.

• cancel_access_requestwrite action

  Cancel an access request you created.

• create_access_requestwrite action

  Create a new access request for data access approval.

• create_classifierwrite action
• create_collectionwrite action

  Create a classifier collection to use for automated data discovery.

• create_databasewrite action

  Connect a new data source to the ALTR platform.

• create_databricks_databasewrite action

  Connect a Databricks workspace to the ALTR platform.

• create_databricks_jobwrite action

  Run a GDLP classification scan on a Databricks database.

• create_gdlp_jobwrite action

  Run a GDLP (Google DLP) classification scan on a Snowflake database.

• create_jobwrite action

  Run an ALTR-native classification scan on a Snowflake database.

• create_keywrite action

  Create a new FPE encryption key.

• create_oltp_access_policywrite action

  Create an access management policy for an OLTP datasource.

• create_oltp_jobwrite action

  Run an on-demand classification scan on an OLTP database (Oracle, MSSQL, MySQL, PostgreSQL) via a sidecar classification agent.

• create_policywrite action
• create_report_commentwrite action

  Add a comment to a report instance.

• create_report_definitionwrite action
• create_report_sign_offwrite action

  Sign off on a report instance.

• create_sc_agentwrite action

  Create a new ALTR agent.

• create_snowflake_access_policywrite action

  Create an access management policy for a Snowflake datasource.

• create_tweakwrite action

  Create a new FPE tweak.

• critical_delete_tokenswrite action

  Delete critical tokens, removing them from the token store.

• critical_detokenize

  Detokenize critical tokens to recover plaintext values.

• critical_partial_detokenize

  Detokenize critical tokens, passing non-token values through unchanged.

• critical_tokenize

  Tokenize plaintext values using ALTR critical tokenization.

• deactivate_key

  Deactivate a specific version of an FPE key.

• deactivate_tweak

  Deactivate a specific version of an FPE tweak.

• delete_classifierwrite action

  Remove a custom classifier you created.

• delete_collectionwrite action

  Delete a classifier collection.

• delete_policywrite action

  Delete a masking policy and all its rules.

• delete_rulewrite action

  Remove a specific masking rule from a policy.

• deny_access_request

  Deny a pending access request.

• disconnect_database

  Disconnect a data source from ALTR.

• get_access_request

  Get details for a specific access request.

• get_access_requests

  List access requests in your ALTR organization.

• get_active_jobs

  List all currently active (non-terminal) classification jobs.

• get_altr_managed_timestamp

  Check whether a newer version of ALTR-managed classifiers is available.

• get_audit_results

  Get results from a previously triggered audit search.

• get_classification_report

  Get detailed results from a completed classification job.

• get_classifier

  Get details for a single classifier by name.

• get_classifiers

  List all available data classifiers (pattern-based detectors) in ALTR.

• get_collection

  Get details for a single collection by name.

• get_collection_classifiers

  List classifiers that belong to a collection.

• get_collections

  List classifier collections (groups of classifiers used for classification jobs).

• get_database_id

  Get the ALTR database ID for a database name.

• get_databases

  Discover which Snowflake databases are connected to ALTR.

• get_job

  Get details for a single classification job by ID.

• get_job_decisions

  List human review decisions recorded for a classification job.

• get_job_findings

  List databases found in a completed classification job.

• get_job_findings_classifiers

  List classifiers that fired on a specific column in a completed job.

• get_job_findings_columns

  List columns in a table from a classification job's findings.

• get_job_findings_lineage

  Get the compound-ruleset evaluation trace (lineage) for a classifier on a specific column in a completed job.

• get_job_findings_schemas

  List schemas in a database from a classification job's findings.

• get_job_findings_tables

  List tables in a schema from a classification job's findings.

• get_job_review_status

  Get the review progress for a completed classification job.

• get_job_summary

  Get an inline per-classifier classification summary for a completed job.

• get_jobs

  Check the status of classification jobs you've run.

• get_key

  Get a single FPE key by namespace and name.

• get_policies

  List masking policies configured in your ALTR organization.

• get_query_audit_results

  Get results from a previously triggered query audit search.

• get_report_definition

  Get a single audit report definition by ID.

• get_report_instance

  Get a single report instance by ID.

• get_report_instance_download_url

  Get a download URL for a report instance.

• get_report_sign_off

  Get the current user's sign-off for a report instance.

• get_roles

  List all ALTR roles (user groups) available in your organization.

• get_rules

  View all masking rules configured for a specific policy.

• get_service_users

  List Snowflake service users available for database connections.

• get_system_audit_results

  Get results from a system audit query.

• get_tweak

  Get a single FPE tweak by name.

• import_altr_managed_classifiers

  Import all ALTR-managed classifiers and create/update the "ALTR Managed" collection.

• list_altr_managed_classifiers

  List available ALTR-managed (prebuilt) classifiers.

• list_keys

  List FPE keys within a namespace.

• list_report_comments

  List comments on a report instance.

• list_report_definitions

  List audit report definitions.

• list_report_instances

  List report instances for a given definition.

• list_report_sign_offs

  List all sign-offs for a report instance.

• list_sc_agents

  List ALTR agents (SIS or CLASSIFIER) in your organization.

• list_tweaks

  List FPE tweaks for the organization.

• pin_report_comment

  Pin a comment on a report instance.

• record_job_decision

  Approve or reject classification findings in a completed job.

• remove_classifiers_from_collectionwrite action

  Remove classifiers from a collection.

• restore_report_definition

  Restore an archived audit report definition.

• revoke_job_decisions

  Revoke (remove) previously recorded review decisions for a job.

• rotate_key

  Rotate the envelope key for a specific FPE key version.

• search_audits

  Search sidecar query audits with filters.

• search_query_audits

  Search Snowflake query audits (tag and column masking).

• search_system_audits

  Search ALTR platform system audits.

• trigger_access_policy_check

  Trigger a manual compliance check for a grant/access management policy.

• trigger_database_status_sync

  Trigger a database status sync.

• trigger_report_definition

  Trigger an on-demand audit report for a definition.

• unpin_report_comment

  Unpin the currently pinned comment on a report instance.

• update_classifierwrite action

  Update an existing custom classifier. Only provided fields are changed.

• update_collectionwrite action

  Update a collection's description.

• update_databasewrite action

  Update a database connection's properties.

• update_job_statuswrite action

  Control a running classification job (pause, cancel, or resume).

• update_report_definitionwrite action
• update_rulewrite action

  Update an existing masking rule's properties without deleting and recreating it.

• update_snowflake_access_policywrite action

  Update an existing Snowflake access management policy.

• Code scan39 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 28 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Altr: common questions

Is Altr MCP server safe?

Yes, by our scan: it is graded A (85/100). Read the Altr safety report

How do I install Altr?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Altr need an API key?

Yes. The registry entry asks for MAPI_KEY, MAPI_SECRET.

Is Altr maintained?

The last commit was 28 days ago (2026-08-25). The latest release is v0.6.0.

What can I use instead of Altr?

Servers from other publishers that do the same job: VMware NSX Security MCP server, npm Registry MCP Server and grim-mcp server. Compare all Altr alternatives.