{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.mcpsmiths/cost-guard-mcp","description":"Pre-flight query cost and result-size guardrails for AI agents on BigQuery, Snowflake, Databricks","title":"Cost Guard MCP","repository":{"url":"https://github.com/mcpsmiths/cost-guard-mcp","source":"github"},"version":"0.3.0","packages":[{"registryType":"pypi","identifier":"cost-guard-mcp","version":"0.3.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"BigQuery: path to a service-account key file (Application Default Credentials). Required to use the bigquery engine.","isSecret":true,"name":"GOOGLE_APPLICATION_CREDENTIALS"},{"description":"Snowflake: account identifier. Required to use the snowflake engine.","name":"SNOWFLAKE_ACCOUNT"},{"description":"Snowflake: username. Required to use the snowflake engine.","name":"SNOWFLAKE_USER"},{"description":"Snowflake: role to assume. Required to use the snowflake engine; has no default and must never be ACCOUNTADMIN.","name":"SNOWFLAKE_ROLE"},{"description":"Snowflake: path to an RSA private key file for key-pair auth (preferred over SNOWFLAKE_PASSWORD). Either this or SNOWFLAKE_PASSWORD is required to use the snowflake engine.","isSecret":true,"name":"SNOWFLAKE_PRIVATE_KEY_PATH"},{"description":"Snowflake: passphrase for an encrypted SNOWFLAKE_PRIVATE_KEY_PATH key file, if the key is encrypted.","isSecret":true,"name":"SNOWFLAKE_PRIVATE_KEY_PASSPHRASE"},{"description":"Snowflake: password (discouraged; prefer SNOWFLAKE_PRIVATE_KEY_PATH). Either this or SNOWFLAKE_PRIVATE_KEY_PATH is required to use the snowflake engine.","isSecret":true,"name":"SNOWFLAKE_PASSWORD"},{"description":"Databricks: SQL warehouse server hostname (e.g. my-workspace.cloud.databricks.com, no scheme, no trailing slash). Required to use the databricks engine.","name":"DATABRICKS_SERVER_HOSTNAME"},{"description":"Databricks: SQL warehouse HTTP path (from the warehouse's Connection Details tab, e.g. /sql/1.0/warehouses/<warehouse-id>). Required to use the databricks engine.","name":"DATABRICKS_HTTP_PATH"},{"description":"Databricks: personal access token (simplest auth option). Either this or DATABRICKS_CLIENT_ID + DATABRICKS_CLIENT_SECRET is required to use the databricks engine.","isSecret":true,"name":"DATABRICKS_TOKEN"},{"description":"Databricks: OAuth machine-to-machine service-principal client ID (preferred for automated use). Requires DATABRICKS_CLIENT_SECRET as well.","name":"DATABRICKS_CLIENT_ID"},{"description":"Databricks: OAuth machine-to-machine service-principal client secret. Requires DATABRICKS_CLIENT_ID as well.","isSecret":true,"name":"DATABRICKS_CLIENT_SECRET"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-09-18T11:30:49.530452Z","publishedAt":"2026-09-18T11:30:49.530452Z","updatedAt":"2026-09-18T11:30:49.530452Z","isLatest":true}}}