SentryFrogg MCP Server supplies a governed command plane for MCP-compatible agents that operate data platforms, remote shells and web services.
概览
SentryFrogg MCP Server supplies a governed command plane for MCP-compatible agents that operate data platforms, remote shells and web services. The implementation prioritises deterministic behaviour, encrypted credential storage and prescriptive workflows so that autonomous agents can execute infrastructure tasks with enterprise auditability. 1. Invoke setup_profile to persist credentials and TLS artefacts; secrets encrypt with AES-256 using .mcp_profiles.key (0600 permissions). 2. Reference the same profile_name for subsequent operations; omitted sensitive fields inherit stored encrypted values. 3. Rotate credentials by reissuing setup_profile; the latest payload supersedes previous entries. 4. Audit existing profiles via list_profiles; responses never disclose secrets. 5. Retire unused profiles by editing profiles.json under change control. - Prefer embedding sslmode directives in connection_url; explicit payload fields override URL parameters.
README
以下为原文 README 节选，完整内容请查看原文。
SentryFrogg MCP Server v4.2.0
Document Profile
| Field | Value |
|---|---|
| Product | SentryFrogg MCP Server |
| Version | 4.2.0 |
| Runtime | Node.js ≥ 16 |
| Interfaces | Model Context Protocol (PostgreSQL · SSH · HTTP) |
| License | MIT |
Executive Synopsis
SentryFrogg MCP Server supplies a governed command plane for MCP-compatible agents that operate data platforms, remote shells and web services. The implementation prioritises deterministic behaviour, encrypted credential storage and prescriptive workflows so that autonomous agents can execute infrastructure tasks with enterprise auditability.
Functional Surface
| Capability | Detail |
|---|---|
| PostgreSQL control | Parameterised SQL, catalog discovery, CRUD helpers, mutual TLS, connection profiling. |
| SSH execution | Serial command dispatch per profile, password/key authentication, reachability diagnostics. |
| HTTP access | REST verbs with JSON payloads, health checks, programmable headers and bearer tokens. |
| Secret vault | AES-256 encrypted profiles persisted in profiles.json with managed key material. |
| Telemetry | Tool-level statistics via getStats() for integration with monitoring stacks. |
System Components
| Component | Scope |
|---|---|
sentryfrogg_server.cjs |
MCP entry point, tool catalogue, lifecycle supervision. |
src/bootstrap/ServiceBootstrap.cjs |
Service registration, dependency wiring, resource cleanup. |
src/managers/PostgreSQLManager.cjs |
SQL execution, profile validation, TLS configuration, pool management. |
src/managers/SSHManager.cjs |
SSH sessions, sequential execution enforcement, profile hygiene. |
src/managers/APIManager.cjs |
HTTP invocation, header synthesis, response shaping. |
src/services/ProfileService.cjs |
Encrypted persistence and retrieval of profile objects. |
src/services/Security.cjs |
Key lifecycle, cryptographic primitives, payload size guards. |
src/services/Validation.cjs |
Canonical validation for incoming payloads. |
MCP Tools
mcp_psql_manager
| Attribute | Specification |
|---|---|
| Required flow | setup_profile → downstream action using same profile_name. |
| Actions | setup_profile, list_profiles, quick_query, show_tables, describe_table, sample_data, insert_data, update_data, delete_data, database_info. |
| Credentials | Either discrete fields (host, port, username, password, database) or connection_url. |
| TLS options | ssl_mode, ssl_ca, ssl_cert, ssl_key, ssl_passphrase, ssl_servername, ssl_reject_unauthorized; omitted values reuse stored secrets. |
| Query rules | quick_query injects LIMIT 100 when absent; bind variables supplied via params array ($1, $2, …). |
| Response format | JSON with success, rows, rowCount, fields, command; failures raise MCP internal errors. |
| Rejection triggers | Missing profile, malformed SQL, payload limits exceeded, invalid TLS configuration. |
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →