QueryPie DAC - Admin

Manage database connections, permissions, and policies through QueryPie platform’s DAC (Data Access Control) administrator features.

Key Features

• Database connection registration and management
• Database access permission granting and management
• Database privilege template management
• Data access policy creation and management
• Data masking pattern and template management

Basic Information

Authentication Method

Administrators must set up MCP server configuration in advance. Users authenticate using OAuth.

Input Parameters

• Server URL (Required): QueryPie domain
• Authorization URL for OAuth (Required): OAuth authorization URL
• Token URL for OAuth (Required): OAuth token URL
• Client ID (Required): OAuth client ID
• Client Secret (Required): OAuth client secret

OAuth Integration Guide

This is the procedure to integrate QueryPie with AI Hub using OAuth. Please follow the steps below.

1. Access QueryPie and Admin Login
   Access your organization’s QueryPie domain (e.g., https://<your-querypie-domain>) and log in with an administrator account.

2. Navigate to OAuth Settings
   Go to Admin Page → General Settings → Security → OAuth Settings menu.

3. Copy Client ID and Secret
   Enter Client ID and Copy your Client ID and Client Secret. You will need them in step 5 below.

4. Enter AI Hub’s OAuth callback URL
   Enter https://api.app.querypie.com/integration/oauth/callback in the Redirect URI field.

5. Access AI Hub and Enter OAuth settings in AI Hub
   Enter the following values in the QueryPie MCP settings in the MCP Integration Management menu of the AI Hub administrator page:

   • Server URL: e.g., https://<your-querypie-domain>
   • Authorization URL for OAuth: e.g., https://<your-querypie-domain>/oauth/authorize
   • Token URL for OAuth: e.g., https://<your-querypie-domain>/oauth/token
   • Client ID (The value you copied in step 3 above)
   • Client Secret (The value you copied in step 3 above)

Supported MCP Tools

Database Management Tools

manage_cloud_provider

Synchronize databases from cloud providers.

manage_db_connection

Create, modify, and manage database connections.

Access Permission Management Tools

manage_db_access

Grant, revoke, and manage database access permissions.

manage_privilege

Manage database privilege templates.

Policy Management Tools

manage_policy

Create and manage data access policies.

manage_policy_rule

Manage policy rules for data access and masking.

manage_masking_pattern

Manage data masking patterns and templates.

Usage Examples

For example,

• When you prompt “Show me the list of database connections registered in the system”,
  The LLM calls the manage_db_connection tool through MCP to retrieve a list of all database connections currently registered in the system.

• When you prompt “Grant access permissions for connections starting with mysql-dev”,
  The LLM calls the manage_db_access tool through MCP to grant Read-Only permissions for connections starting with mysql-dev.

Precautions

• Keep OAuth client information secure.
• Since this requires administrator privileges, ensure proper permission settings are configured.
• Follow your organization’s security policies when managing databases and changing permissions.
• Regularly review access logs and policy application status.
• Follow privacy protection regulations when setting up masking patterns.