Canonic MCP server
io.github.mischuh/canonic·v0.46.1·3 starsThe Open Context Layer for Data Agents
not scanned yet
3 stars
Reviews
Write oneNobody has reviewed Canonic yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Canonic tools
No tool declarations could be read from the package source. They show once the server is installed.
How Canonic compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- GitHub stars
- 3
- more than 80% of 28,688 servers
Release history: 10 versions in the registry since 2026-09-28, latest 2026-10-29, typically one every 3 days.
Install Canonic in Claude Code, Cursor or VS Code
claude mcp add canonic -- uvx canonic
What the publisher says
From the Canonic repository's README, as published. We do not edit it. Read it on GitHub
canonic
<!-- mcp-name: io.github.mischuh/canonic -->
The context layer that lets AI agents query your data correctly.
Point canonic at your database and it builds the context an agent needs to answer data questions accurately: definitions, relationships, business meaning, and the guardrails that stop confidently-wrong answers. It keeps that context up to date as your data changes, and it never touches your warehouse beyond reading it.
📖 Full documentation: https://docs.getcanonic.app
Package and image names below show the shape of each install channel; exact names are confirmed per release.
The problem
An AI agent connected straight to your warehouse sees tables and columns, not meaning. It doesn't know that revenue lives in orders.amount but excludes refunds, or that "active customer" has a specific definition your finance team agreed on. So it guesses. Schema access makes an agent fluent. It doesn't make it correct.
Real output, captured from a live run against the ecommerce example:
$ canonic sql "SELECT SUM(amount) FROM fct_orders"
┏━━━━━━━━━┓
┃ sum ┃
┡━━━━━━━━━┩
│ 4050.50 │
└─────────┘This total includes two refunded orders ($260), a confident, well-formatted number that's off by 6.4%.
$ canonic --json query --metrics revenue
{
"result": { "rows": [["3790.50"]] },
"compiled": {
"sql": "SELECT SUM(\"orders\".\"amount\") AS \"total_revenue\" FROM \"fct_orders\" AS \"orders\" WHERE \"orders\".\"status\" <> 'refunded'"
},
"metadata": {
"guardrails_fired": [{ "id": "revenue-excludes-refunds", "kind": "mandatory_filter" }]
}
}canonic resolves "revenue" to its canonical definition, compiles the guardrail into the SQL whether or not anyone asked for it, and returns the right number with the reasoning attached.
canonic is not a BI tool and not a chat interface: it's the layer that feeds the tools you already have (a BI dashboard, an agent, a notebook) correct, governed answers.
The three layers
canonic's context lives in three committed surfaces: plain files in your git repo, reviewed like code.
Changes how the SQL runs → semantics. A human needs it to trust the answer → knowledge. Governs which definition is authoritative → contracts. See Concepts: the three layers.
Install
uv (dev machines, primary):
uvx canonic --version # ephemeral, no install step
uv tool install canonic # persistent, global commandpip (fallback for environments without uv):
pip install canonicDocker (CI, headless, air-gapped):
docker pull ghcr.io/mischuh/canonic:latestVerify with canonic --version. Air-gapped install and offline wheels: see Installation.
Quickstart
The fastest path uses local connectors, no server, no network. Point at a SQLite .db or DuckDB .duckdb/CSV/Parquet file:
canonic setupShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Canonic: common questions
- Is Canonic MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Canonic safety report
- How do I install Canonic?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Canonic need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Canonic maintained?
- The last commit was 37 days ago (2026-09-28). The latest release is v0.46.1.
- How does Canonic compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); github stars 3 (more than 80% of 28,688 servers). Full comparison.