Model Context Protocol

100+ MCP tools. Security built into each one.

Connect Claude Code, Codex, Claude Desktop, or any MCP-compatible client and work through 100+ tools with Tadpole's permission model, masking, and audit built in. The AI touches your databases only through these tools — no extra security setup.

Try the demo 6-month enterprise trial

MCP tools with policy built in

100+ MCP tools with Tadpole DB Hub's permission model, DLP filters, and audit logging applied. The AI reaches your databases only through them, and every call passes RBAC, masking, approval, and audit — no exceptions.

From queries to ops and security — 100+ tools

Every tool passes Tadpole's RBAC, masking, approval, and audit the moment it's called. The AI works your databases only through these tools — no extra security setup.

Explore & Query

Browse schemas, tables, and data in plain English.

list_databaseslist_tablesdescribe_tableget_schemaexecute_queryget_table_datasearch_dataget_ddllist_schemaslist_catalogs…

Ops & Diagnostics

Inspect slow queries, locks, and sessions; diagnose performance.

get_slow_queriesdiagnose_query_performanceget_lock_waitsget_long_transactionsget_sessionskill_sessionhealth_check_allget_db_statisticsestimate_query_cost…

Security & Governance

Masking, permissions, and policy enforced at the tool-call layer.

preview_maskingget_masking_rulessimulate_query_permissionget_my_permissionsexplain_my_accessget_blocked_commandsclassify_columnsget_policy_summarycompare_policies…

Approval Workflow

High-risk actions run only after an approver settles them.

create_settle_requestlist_settle_candidate_approversapprove_settle_requestreject_settle_requestexecute_approved_settlelist_settle_requestsget_settle_detail…

Audit & Reporting

Every call logged with user and intent, exported as reports.

get_audit_logsget_eventsget_login_historyget_user_activitygenerate_compliance_reportget_dashboardget_security_events…

Change & Admin

Schema changes, migrations, and user/DB management.

prepare_changereview_changegenerate_migrationcompare_schemasbegin_transactioncommit_transactionadd_usermodify_useradd_database…

All of these — 100+ tools in total — run under the same security policy.

Role-Based Tools

Your role
shapes the toolset.

Even on the same MCP server, the tools exposed depend on the connected user's role. USER gets query and approval tools, DBA adds ops and policy, SYSTEM_ADMIN adds user and security management — tools outside your role never even appear in the list.

USERQuery · Approval

execute_querylist_tablesget_table_datacreate_settle_requestget_audit_logs

DBA+ Ops · Policy

get_sessionsget_slow_queriesget_masking_rulesprepare_changesimulate_query_permission

SYSTEM_ADMIN+ User · Security

get_user_listadd_userkill_sessionget_security_eventsgenerate_compliance_report

Tools outside your role are dropped from the tools/list response.

Policy Enforcement

Every tool
passes policy.

Whichever tool the AI calls, it passes the same RBAC, masking, and approval workflows as humans. High-risk SQL never runs without an approval.

⏺ Let me first fetch the approver candidates.
  Called tadpole-mcp (ctrl+o to expand)
⏺ Found 2 approver candidates. Pick one to send the request to.
  user_seqnamemaster
  18Min-Ji KimNO
  1Seo-Jun ParkYES (master)
⎿ User: Seo-Jun Park (seq=1, master)
  Called tadpole-mcp (ctrl+o to expand)
⏺ Settle request created.
  seq56 (group_seq=3000915)
  targetSELECT * FROM sample_db.customer LIMIT 10
  approverSeo-Jun Park (seq=1, master)
  modeONE_TIME
  Once Seo-Jun approves, run /settle execute 56 to execute.
※ recap: Querying 10 sample rows from sample_db.customer in TadpoleDBHub. SELECT needs approval, so settle request seq=56 was sent to Seo-Jun Park (master). Next: run /settle execute 56 once approved. (disable recaps in /config)
✻ Cooked for 23s · Claude Opus 4.7

Works for your entire team

DevelopersDBAsSecurity EngineersCompliance Teams

Ship with AI, govern like always

Your AI tools query databases through the same permission model your team already uses.

Full visibility into AI activity

Every AI query is attributed to a user, logged with intent, and searchable alongside manual queries.

Masking and approvals always on

Sensitive data masking and high-risk approval workflows apply to AI queries automatically.

AI meets your security model.

Join teams using TadpoleHub to let AI access databases without sacrificing control.