# DataNexa

A local, read-only MCP gateway that aggregates SQLite, MySQL, and PostgreSQL connections behind one endpoint, applying SQL-syntax-tree validation, row and time limits, and a full audit log so an AI agent's database access stays controlled.

DataNexa runs on a user's own machine as a database gateway for AI agents, letting a single MCP configuration reach multiple databases instead of setting up a separate MCP service for each one. It natively supports SQLite, MySQL, and PostgreSQL, with a technical-preview JDBC path for additional databases, and enforces read-only access by validating each query's SQL syntax tree rather than relying only on the database account's own permissions, while also capping returned row counts, execution time, and connection counts.

Every access is written to a local audit log recording which SQL ran, when, through which tool, and with what result, and logs can be automatically cleaned up after a configurable retention period with SQL literals redacted. Authentication uses bearer tokens with manual rotation and automatic circuit-breaking, database passwords are kept in the operating system's credential store rather than a plain configuration file, and the desktop application is built with Tauri, React, and Rust.

Website: https://mingozacwu.github.io/datanexa-site/
