
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@stackql/mcp-server
Advanced tools
StackQL MCP server - SQL-native query and provisioning engine for cloud infrastructure, served over MCP. Downloads the signed stackql binary on first run.
npx-able launcher for the StackQL MCP server - a SQL-native query and provisioning engine for cloud and SaaS infrastructure (AWS, Azure, Google, GitHub, Databricks, and other providers), served over the Model Context Protocol.
On first run, the launcher downloads the signed stackql binary for your
platform from the matching GitHub release (sha256-verified against pins baked
into this package), caches it under ~/.stackql/mcp-server-bin/, and starts
it as an MCP stdio server. Subsequent runs start instantly from the cache.
With any MCP client that supports stdio servers:
{
"mcpServers": {
"stackql": {
"command": "npx",
"args": ["-y", "@stackql/mcp-server"]
}
}
}
Provider credentials are passed through with stackql's standard --auth flag:
{
"mcpServers": {
"stackql": {
"command": "npx",
"args": [
"-y",
"@stackql/mcp-server",
"--auth={\"github\":{\"type\":\"null_auth\"}}"
]
}
}
}
Any extra arguments are passed to stackql after the standard MCP server
arguments. The launcher sets --approot to ~/.stackql and disables the
audit file sink by default; pass your own --approot or --mcp.config to
override (later flags win).
STACKQL_MCP_BIN - path to an existing stackql binary; skips the download.STACKQL_MCP_BUNDLE - path to a local .mcpb bundle to extract the binary
from (testing; skips download and sha verification)..mcpb):
https://github.com/stackql/stackql/releases/latestuvx stackql-mcp-serverdocker run -i --rm stackql/stackql-mcpio.github.stackql/stackql-mcpFAQs
StackQL MCP server - SQL-native query and provisioning engine for cloud infrastructure, served over MCP. Downloads the signed stackql binary on first run.
The npm package @stackql/mcp-server receives a total of 171 weekly downloads. As such, @stackql/mcp-server popularity was classified as not popular.
We found that @stackql/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.