/ 100

7 days ago

pulsemcp

Apache Doris

Item: Apache Doris
Rating: 74
Author: M8ven

Enables direct SQL query execution and metadata retrieval from Apache Doris databases without switching contexts.

→ apache/doris-mcp-server · listed on pulsemcp

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCP mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 8 credentials: JWT_PRIVATE_KEY, JWT_PUBLIC_KEY, DEFAULT_ADMIN_TOKEN, DEFAULT_ANALYST_TOKEN, DEFAULT_READONLY_TOKEN, DORIS_PASSWORD, TOKEN_SECRET, TOKEN_MANAGEMENT_ADMIN_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretJWT_PRIVATE_KEY

🔐 secretJWT_PUBLIC_KEY

🔐 secretDEFAULT_ADMIN_TOKEN— Default admin token (customizable via env)

configDEFAULT_ADMIN_DESCRIPTION

🔐 secretDEFAULT_ANALYST_TOKEN— Default analyst token (customizable via env)

configDEFAULT_ANALYST_DESCRIPTION

🔐 secretDEFAULT_READONLY_TOKEN— Default readonly token (customizable via env)

configDEFAULT_READONLY_DESCRIPTION

configSERVER_VERSION

configSERVER_HOST

configSERVER_PORT

configTRANSPORT

configDORIS_HOST— export ="127.0.0.1"

configDORIS_USER— export ="root"

🔐 secretDORIS_PASSWORD— export ="your_password"

configDORIS_DATABASE— Default database name (default: information_schema)

configLOG_LEVEL— Log level (DEBUG/INFO/WARNING/ERROR, default: INFO)

configSERVER_NAME

configFE_ARROW_FLIGHT_SQL_PORT— Frontend Arrow Flight SQL port for ADBC (New in v0.5.0)

configBE_ARROW_FLIGHT_SQL_PORT— Backend Arrow Flight SQL port for ADBC (New in v0.5.0)

configDORIS_PORT— export ="9030"

configDORIS_FE_HTTP_PORT

configDORIS_BE_HOSTS— BE nodes for monitoring (comma-separated, optional - auto-discovery via SHOW BACKENDS if empty)

configDORIS_BE_WEBSERVER_PORT— BE webserver port for monitoring tools (default: 8040)

configDORIS_MAX_CONNECTIONS— Maximum connection pool size (default: 20)

configDORIS_CONNECTION_TIMEOUT

configDORIS_HEALTH_CHECK_INTERVAL

configDORIS_MAX_CONNECTION_AGE

configENABLE_TOKEN_AUTH— export =true

configENABLE_JWT_AUTH— Enable JWT authentication (default: false)

configENABLE_OAUTH_AUTH— Enable OAuth authentication (default: false)

configOAUTH_ENABLED

configENABLE_DORIS_OAUTH_AUTH— Enable Doris-backed OAuth authentication (default: false)

configDORIS_OAUTH_BASE_URL— Public base URL used by Doris-backed OAuth discovery and token endpoints

configDORIS_OAUTH_DB_TOOLS_ENABLED— true opens the reviewed metadata bucket. The reviewed tools are:

configDORIS_OAUTH_QUERY_TOOLS_ENABLED

configDORIS_OAUTH_EXPLAIN_TOOLS_ENABLED

configAUTH_TYPE— Legacy authentication type (token/basic/oauth, deprecated - use individual switches)

🔐 secretTOKEN_SECRET— Legacy token secret key (use token-based auth instead)

configTOKEN_EXPIRY

configMAX_RESULT_ROWS— Maximum result rows (default: 10000)

configMAX_QUERY_COMPLEXITY

configENABLE_SECURITY_CHECK— Enable/disable SQL security validation (default: true)

configBLOCKED_KEYWORDS— Comma-separated list of blocked SQL keywords

configENABLE_MASKING— Enable data masking (default: true)

configTOKEN_FILE_PATH— Path to tokens.json file for token management (default: tokens.json)

configENABLE_TOKEN_EXPIRY

configDEFAULT_TOKEN_EXPIRY_HOURS

configTOKEN_HASH_ALGORITHM

configENABLE_HTTP_TOKEN_MANAGEMENT— export =true

🔐 secretTOKEN_MANAGEMENT_ADMIN_TOKEN— Admin Authentication: Requires for access

configTOKEN_MANAGEMENT_ALLOWED_IPS— 127.0.0.1,::1

configREQUIRE_ADMIN_AUTH— export =true

configENABLE_QUERY_CACHE— Enable query caching (default: true)

configCACHE_TTL— Cache time-to-live in seconds (default: 300)

configMAX_CACHE_SIZE

configMAX_CONCURRENT_QUERIES— Maximum concurrent queries (default: 50)

configQUERY_TIMEOUT— 60 # Query execution timeout

configMAX_RESPONSE_CONTENT_SIZE— Maximum response content size for LLM compatibility (default: 4096, New in v0.4.0)

configLOG_FILE_PATH— Log file path (automatically organized by level)

configENABLE_AUDIT— Enable audit logging (default: true)

configAUDIT_FILE_PATH

configENABLE_LOG_CLEANUP— Enable automatic log cleanup (default: true, Enhanced in v0.5.0)

configLOG_MAX_AGE_DAYS— Maximum age of log files in days (default: 30, Enhanced in v0.5.0)

configLOG_CLEANUP_INTERVAL_HOURS— Log cleanup check interval in hours (default: 24, Enhanced in v0.5.0)

configENABLE_METRICS

configMETRICS_PORT

configHEALTH_CHECK_PORT

configENABLE_ALERTS

configALERT_WEBHOOK_URL

configADBC_DEFAULT_MAX_ROWS— Default maximum rows for ADBC queries (default: 100000)

configADBC_DEFAULT_TIMEOUT— Default ADBC query timeout in seconds (default: 60)

configADBC_DEFAULT_RETURN_FORMAT— Default return format - arrow/pandas/dict (default: arrow)

configADBC_CONNECTION_TIMEOUT— ADBC connection timeout in seconds (default: 30)

configADBC_ENABLED— Enable/disable ADBC tools (default: true)

configDATA_QUALITY_MAX_COLUMNS_PER_BATCH

configDATA_QUALITY_DEFAULT_SAMPLE_SIZE

configDATA_QUALITY_SMALL_TABLE_THRESHOLD

configDATA_QUALITY_MEDIUM_TABLE_THRESHOLD

configDATA_QUALITY_ENABLE_BATCH_ANALYSIS

configDATA_QUALITY_BATCH_TIMEOUT

configDATA_QUALITY_ENABLE_FAST_MODE

configDATA_QUALITY_FAST_MODE_SAMPLE_SIZE

configDATA_QUALITY_ENABLE_DISTRIBUTION_ANALYSIS

configDATA_QUALITY_HISTOGRAM_BINS

configWORKERS— 1 is required. WORKERS=0 expands to CPU count and fails when Doris-backed OAuth is enabled.

configENABLE_MULTI_DATABASE

configMULTI_DATABASE_NAMES

configDB_DATABASE

configMETADATA_CACHE_TTL

configENABLE_TABLE_HIERARCHY

configEXCLUDED_DATABASES

configTABLE_HIERARCHY_PATTERNS

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/apache-doris-mcp-server-90me3d)](https://m8ven.ai/mcp/apache-doris-mcp-server-90me3d)

commit: 0e843ae3432115ea5895fbd90a97d495c77f911c

code hash: a54320ca06a6fe34b05fbad2325c2bbef6b96c9b07a4227fd975d1998e16bb83

verified: 7/24/2026, 8:52:48 AM

view raw JSON →