BridgeMCP — Secure Read-Only AI Data Gateway

BridgeMCP — Secure Read-Only AI Data Gateway

The challenge Teams want AI to answer questions from business data without exposing database credentials or allowing unsafe queries.

The solution I designed and built a security boundary that turns SQLite files or CSV folders into restricted MCP tools. The gateway enforces read-only access, table allowlists, sensitive-field masking, result limits, timeouts, and complete query auditing.

Engineering highlights • Three independent read-only enforcement layers • Automatic phone and email masking with anti-bypass checks • Row, byte, and execution-time limits • Full audit records for accepted and rejected calls

Full source code and setup instructions: https://github.com/LuciferLiu/bridgemcp