Bollard — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Bollard (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An AI-powered, safe database access gateway built on the Model Context Protocol (MCP).
Bollard acts as an intelligent execution proxy between your AI code assistant (Cursor, VS Code, Windsurf, Claude Desktop, OpenAI Codex) and your physical databases — providing safe query execution, dynamic schema discovery, cost-based risk parsing, data leak prevention, and session memory.
Bollard sits as a transparent intermediary layer between your AI development client and your target database. When the client executes database tools, the requests are statically evaluated, authorized, and structured to optimize context window tokens before the database engine sees them.
| Workflow Aspect | Before Bollard (Direct SQL Assistant) | With Bollard (Safe Database Gateway) |
|---|---|---|
| Schema Context | Relies on manually pasted schema blocks, leading to hallucinated queries on outdated schemas. | Inspects schemas dynamically, caching metadata and profiles to feed the LLM accurate context. |
| Execution Safety | AI directly runs generated queries. High risk of accidental data modification, deletion, or drops. | Risk levels (LOW to EXTREME) are computed statically. Destructive operations are safely blocked. |
| Human-in-the-Loop | None. Large batch updates or structural migrations execute immediately without warnings. | Write queries require double confirmation (confirming query matching phrases and typing local PINs). |
| Data Leak Prevention | AI can query any table, including sensitive tables (e.g., password hashes, user secrets, API keys). | Access control lists block sensitive tables via connection-level blocklist wildcards. |
| Token & Context Usage | Large queries return massive raw rows, flooding the context window and wasting thousands of tokens. | Large queries are compressed into structured summaries with a 10-row preview and column stats (up to 97% token savings). |
| Correction Loop | No memory of past mistakes. AI repeats the same syntax/query errors in new sessions. | Custom fixes and deprecated field overrides are persisted and auto-injected as agent instructions. |
Bollard is written in Python and is available on PyPI:
pipx install bollard-mcp pip install bollard-mcp#### Cursor
bollardcommandbollard-mcp (or the absolute path to `bollard-mcp` or `python` inside your virtualenv, e.g., `python -m bollard_mcp.server`)Or edit your Cursor config file directly (~/.cursor/mcp.json):
{
"mcpServers": {
"bollard": {
"command": "bollard-mcp"
}
}
}#### VS Code (Cline / Roo Code) Add the configuration to your Cline settings file (located at %APPDATA%\Code\User\globalStorage\saoudrizwan.claude-dev\settings\cline_mcp_settings.json on Windows):
{
"mcpServers": {
"bollard": {
"command": "bollard-mcp"
}
}
}#### Windsurf Add the configuration under your global Windsurf MCP configuration file (~/.codeium/windsurf/mcp_config.json):
{
"mcpServers": {
"bollard": {
"command": "bollard-mcp"
}
}
}#### Claude Desktop Add the configuration to your Claude Desktop config file (%APPDATA%\Claude\claude_desktop_config.json on Windows):
{
"mcpServers": {
"bollard": {
"command": "bollard-mcp"
}
}
}#### OpenAI Codex Add the server block under the [mcp_servers] table in your Codex configuration file (~/.codex/config.toml):
[mcp_servers.bollard]
command = "python" # or "bollard-mcp" if installed globally via pipx
args = ["-m", "bollard_mcp.server"]
cwd = "/path/to/your/bollard-mcp"💡 Write Operations in Standalone Clients: In standalone clients (like OpenAI Codex or Claude Desktop) that do not run the editor helper extension, Bollard automatically falls back to an In-Chat PIN Gate. When the AI attempts a write query, the server will block execution, generate a local 4-digit verification PIN, and print it directly in the chat. You simply need to copy-paste this PIN back into the chat prompt to authorize and execute the write query safely.
Once Bollard is registered, prompt your AI agent inside your chat client to connect.
"Connect to my local database with alias `local_postgres` and connection string `postgresql://postgres:postgres@localhost:5432/dbcopilot`"
"Connect to local database with alias `local_postgres` at `postgresql://postgres:postgres@localhost:5432/dbcopilot` and forbid access to `user_secrets`"
If you are testing database safety gates locally using a Docker PostgreSQL container:
docker psusers, orders, user_secrets) by running our seeding script: python examples/create_postgres_test_db.pyuser_secrets to verify the blocklist intercepts the request).Bollard is dual-licensed under:
[email protected].~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.