ContextGate

简体中文 · Documentation · Download v0.8.0

Semantic Data Gateway for AI Agents

ContextGate turns existing business queries into verified, authorized and traceable tools for AI Agents. Administrators connect sources, explain queries, verify them and publish. Users connect their existing Agent client, find an authorized query and run it with their own inputs.

Business definitions and shared ontologies are optional context. Queries keep their native results; ContextGate does not store knowledge-graph instances or provide a reasoning engine. It is written in Go with an embedded bilingual administration UI; no Node.js runtime is required.

Choose your guide

| What you want to do | Start here | | --- | --- | | Use an Agent to query an existing service | User guide — connect, find queries, read results and resolve errors | | Deploy the service or provide queries to others | Administrator guide — install, publish, grant access and operate | | Change the code or reproduce verification | Contributing — development, validation and release references |

The web UI is an administration console. Query users work through MCP at /mcp and do not need a console account. Configuration MCP at /mcp/config is a separate administrator capability.

Captured from a running administration console with isolated databases and sample data.

Capabilities

| Capability | What it provides | | --- | --- | | Verified queries | Publish working SQL or fixed read API operations with parameter contracts, trials and explicit versions | | Business context | Describe terms and metrics; optionally reuse shared entities and source mappings | | Controlled access | Per-Agent source grants, expiry, pause, rotation, revocation and OAuth; optional templates-only mode | | Bounded native reads | Read-only protection, timeouts, cancellation and result limits across SQL, document, key-value, search, graph, time-series and HTTP API sources | | Native results | Preserve large integers, decimals, binary values and native result structures | | Administration and operations | Named accounts, encrypted credentials, audit/OTLP export, health checks and backup recovery |

The support matrix lists verified products, versions and limitations. Snowflake, Databricks SQL, BigQuery and Redshift are cloud previews without real cloud-environment verification.

Set up a service

ContextGate 0.8.0 provides Linux arm64 / amd64 packages with the UI, private C++ runtime libraries, documentation, examples and checksums. They require glibc ≥ 2.36 and a PostgreSQL metadata database. macOS users can run the service through Docker / OrbStack.

Follow installation, then first-time administrator setup. The three-query support example is a small starting point. Existing deployments should read the upgrade notes.

Project

Formerly MCP DB Hub. The primary executable is contextgate; mcpdbhub, existing MCPDBHUB_* settings and telemetry names remain compatible. See brand and compatibility.

Report an issue · Security · Changelog · Architecture

ContextGate is licensed under the Apache License, Version 2.0. See NOTICE for attribution and third-party notices for dependency licenses.