kvery_list_queriesLABSCO SUMMARY
Scoping a token to tagged queries is a neater permission model than most database tools manage.
The usual choice is all-or-nothing: either the agent can run queries or it cannot. Tagging queries and issuing a token that only reaches one tag means a reporting assistant and an operational one can share a platform without sharing a blast radius — and the boundary is visible in the tags, which someone can audit. Free tier with no card makes it easy to check whether the model fits.
What it is
Kvery's endpoint over their query platform. The interesting property is the token model: a scoped token restricts what the connection can run.
What you get
Six tools, all run under your account's existing group permissions: kvery_list_queries and kvery_search find saved queries, kvery_get_query returns a query's metadata, parameters and SQL, kvery_execute_query runs one with parameters and returns live results, and kvery_list_groups and kvery_get_context report the groups, user and permissions in play.
Requirements
An API key. There is a free-forever plan with no card. Data is encrypted with AES-256, and scoped tokens limit a connection to queries carrying particular tags.
Setup effort
Paste a URL with a key — add the endpoint to your client
USE CASES
Letting an agent run approved queries only
Tag the safe ones and issue a token scoped to that tag.
Keeping permissions consistent
The connection runs with your account's own rights, not a service identity.
6 tools
Listed in project docs. Your client may show a different list.
kvery_searchkvery_get_querykvery_execute_querykvery_list_groupskvery_get_contextBEFORE YOU INSTALL
What to know first
Tools you get
6 tools named in the project's documentation.
Requires
- an MCP client that can reach a remote endpoint
- A bearer API key beginning kvery_mcp_
Where it runs
The documented client connects to a hosted endpoint.
INSTALLATION
Connect your client
Add the endpoint to your client.
Server setup
https://app.kvery.io/mcpRequirements
- A bearer API key beginning kvery_mcp_
MCP Clients
Any MCP client
{
"mcpServers": {
"kvery": {
"url": "https://app.kvery.io/mcp",
"headers": {
"Authorization": "Bearer <YOUR_TOKEN>"
}
}
}
}<YOUR_TOKEN> is your token from Profile → MCP / API Keys in Kvery (the same page gives you this config to copy). Tokens can be scoped to query tags and expire after 90 days.