cortexdb-connector-mcp

Overview ¶

cortexdb-connector-mcp runs the data-connector tools (connector_introspect, connector_plan, connector_run, connector_unmask) as an MCP stdio server.

It connects to live Postgres/MySQL sources on demand (DSN supplied per tool call), classifies + desensitizes per a human-signed MaskingPlan, and imports the result into a CortexDB knowledge file (RAG + knowledge graph). Reversible pseudonyms live in a SEPARATE token vault keyed per tenant; connector_unmask is the only reverse path.

Environment:

CORTEXDB_PATH          knowledge DB file (default: ~/.cortexdb/cortexdb.db)
CONNECTOR_VAULT_PATH   token vault file  (default: <db dir>/cortexdb.vault.db)
CONNECTOR_TENANT       tenant id         (default: default)
CONNECTOR_KEY_FILE     path to a 32-byte (or 64-hex) key file, OR
CONNECTOR_KEY_ENV_PREFIX  env prefix for per-tenant keys (default: CONNECTOR_KEY_)

Without a key source the un-mask/pseudonymize paths are unavailable; the introspect/plan tools (which never touch reversible data) still work.