DataCharter

Query all your data locally — then hand your AI agents exactly the data you choose, and not one column more.

PyPI Python License: Apache-2.0 DataCharter MCP server on Glama

datacharter.dev · Desktop app (beta) · Docs · Blog · CI Action

The big-words version: a local, federated data explorer with governed agent data access, powered by DuckDB. Here's what that actually means 👇

🔍 Query all your data, locally — no pipelines, no warehouse, no waiting

  • Local CSV, Parquet, JSON, and Excel files — or drag one onto the window
  • Postgres, MySQL, SQLite, SQL Server, Snowflake, BigQuery, DuckDB, Iceberg, Delta — and more
  • JOIN a local CSV → a Snowflake table → a Parquet file in S3, in one SQL statement, all on your laptop
  • Yes, it's as unreasonable as it sounds. You kind of have to try it to believe it.

🤖 Connect an agent — and decide exactly what it's allowed to see

  • Claude Code — runs on your existing subscription, no API key
  • A model running fully local with Ollama
  • Any OpenAI-compatible agent
  • Grant or deny access in the UI or right in your data contracts, at every level: whole sources → individual tables → individual columns
  • PII is auto-detected and defaulted to no agent access — override per field if you really mean to
  • Teach it your data's quirks. Markdown guides in guides/*.md ("revenue is net of refunds", "exclude QA accounts") reach every agent — chat, Claude Code, and MCP clients alike. Start from the end-to-end example.
  • Or let the guide write itself. datacharter suggest mines your query history for the habits you repeat and turns them into guide lines — with evidence, offline, no model required.
  • Measure the lift. datacharter eval --compare-guides scores the agent on questions you write and shows how much your guides moved accuracy — locally, and as a CI gate. See Agent evals.
  • Prove it happened. A tamper-evident flight recorder logs every agent access — dual attribution, masked columns, hash-chained — with datacharter audit verify and one-command evidence packs.
  • Know the moment it fails. Opt-in canary tripwires plant masked honeytokens; if one ever escapes to agent output, you get a tamper-evident alarm — and block mode withholds the response.
  • Clean-room math, one YAML line. Policies like aggregates only and groups of at least 10 are enforced by query analysis — k-anonymity suppression and join limits, written in plain English.
  • Answers from definitions, not guesswork. Declare metrics: once and agents call query_metric — so "revenue" means the same governed SELECT every time, masking and policies still applied.
  • Attack your own governance. datacharter redteam — the Gauntlet — fires a battery of PII-exfiltration, read-only-bypass, and policy-evasion attacks through the real tool path and hands you a report card. Exits non-zero on any breach — a CI gate that proves your governance still holds.
  • Code-review agent access itself. datacharter access diff is terraform plan for AI data access: it diffs the effective agent-visible surface between two charter versions — a table granted, a PII column unmasked, a policy loosened — and --fail-on widened blocks the PR. Your governance is a file in git, so it can be reviewed like any other change.
  • Don't take our word for it: flip on Agent view and see, column by column, exactly what your agent gets back when it runs a query. (Spoiler: the PII comes back •••.)

Wait, there's more!

Beyond local federation and governed agent access, you also get:

  • See answers as you type. Live results preview while you write SQL, one-click auto-charts, and a profiling panel — missing values, distributions, outliers, and per-column top-value bars — no separate BI tool.
  • Never lose a query. Every run is saved to a local history you can reopen, and a ⌘K command palette jumps to any table or action.
  • Know the cost before you run. One click estimates how many rows a query will scan and warns before a big one.
  • Safe by design. The engine is read-only by construction — no query can write, delete, or touch the filesystem — so pointing an AI (or a teammate) at your real databases can't do damage.
  • Point other AI tools at your data, too. A governed MCP server exposes the same read-only, PII-masked query tools to Cursor, Cline, or your own agent.
  • Every agent answer is reproducible. The chat shows the exact SQL the agent ran, with one click to open it in the editor — and each result shows which source columns it read, so you always know where a number came from.
  • Save, reuse, export. Snapshot a result as a reusable local table; export to CSV, Parquet, JSON, or XLSX.
  • Governance you can automate. From the command line: assert data quality (datacharter test), catch schema/PII drift in CI, diff data across sources, trace cross-source lineage, and define certified metrics. Or drop the GitHub Action into your workflow and let a broken contract block the PR.

DataCharter — live SQL preview, auto-charts, per-query provenance, and PII masking

Status: pre-release. V1 in development.

Quick start

No terminal? Download the desktop app (beta) for macOS or Windows — the same governed explorer in a native window. Desktop docs.

# Try it instantly on generated demo data — no install, no config:
uvx datacharter serve          # needs `uv` → https://astral.sh/uv
# → serves at http://127.0.0.1:8321 (open it in your browser)

# Or install it:
brew install datacharter/tap/datacharter   # macOS (Homebrew)
pip install datacharter                     # Python 3.11+ (any OS)

# Start your own workspace:
datacharter init               # scaffolds charter.yaml, queries/, .env.example
# → add a source: edit charter.yaml, or use the "Sources" panel in the UI
datacharter serve              # → http://127.0.0.1:8321

Then, once it's running, drag a CSV, Parquet, or JSON file onto the window to query it instantly — no config needed.

Optional natural-language agent — point it at any OpenAI-compatible endpoint:

export OPENAI_BASE_URL=...     # any OpenAI-compatible API
export OPENAI_API_KEY=...
datacharter serve

…or run fully local — no API key, no data leaves your machine (requires Ollama):

ollama pull qwen3:8b           # once
datacharter serve --local      # qwen3:8b by default (--model to change)

Why DataCharter

  • Your contracts are the catalog. charter.yaml describes sources, tables, and PII fields — the same contract spec your data team already writes, so there's no separate metadata store to maintain.
  • Real federation, not just a shared connection. Filters and projections are pushed down to each source — even across a cross-source join, every leg is filtered where its data lives. (Snowflake runs via connector extract, datacharter[snowflake], with the same pushdown into the extract.)
  • Local-first. One process, your machine, no cloud dependency. The optional --local agent runs a small open model via Ollama — no API key, no data leaves your machine.
  • The workspace is a directory. charter.yaml + queries/*.sql + .env.example — commit it, clone it, datacharter serve. Your team's whole exploration environment travels as a repo; secrets and local state never do.

DataCharter governs and audits your data, not just displays it. The full command set (drift, scan, diff, metric, mcp, access diff, redteam, and more) is in the CLI reference; the security model is in security.

Built on

DataCharter stands on excellent open-source foundations:

Testing uses VidaiMock, an Apache-2.0 mock LLM server, as the offline agent endpoint in CI.

DuckDB is a trademark of the DuckDB Foundation. DataCharter is an independent project and is not affiliated with or endorsed by the DuckDB Foundation.

Privacy

DataCharter runs entirely on your machine. It collects no data, sends no telemetry, and operates no servers — your data, queries, and credentials never leave your control except to the sources you configure or a model provider you explicitly enable. Full policy: Privacy Policy.

License

Apache-2.0

Project links

Data verified by PyPI on Aug 12, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.42.1)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for datacharter from gravatar.com datacharter

Credits

Author: DataCharter, Rishi Mashelkar

GitHub Statistics

Data verified by PyPI on Aug 12, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

Apache-2.0
View SPDX License List

Requires

Python >=3.11

Provides Extra

desktop dev snowflake

Tags

data-contracts data-exploration duckdb federation local-first sql

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

datacharter-0.24.8.tar.gz (8.2 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

datacharter-0.24.8-py3-none-any.whl (4.1 MB view details)

Uploaded Python 3

File details

Details for the file datacharter-0.24.8.tar.gz.

File metadata

  • Download URL: datacharter-0.24.8.tar.gz
  • Upload date:
  • Size: 8.2 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for datacharter-0.24.8.tar.gz
Algorithm Hash digest
SHA256 ddb2e69b9c64fefded5e751ad0ee053dbbbfda231e88cbcd72ede6b86926a4bc
MD5 1e9eed1bece8dca6c26398a1ed26025e
BLAKE2b-256 a054ab9aeb021f1006b571d7ddb1d2dbc48d84a3502b950d610a0b6e388ccf40

See more details on using hashes here.

Provenance

The following attestation bundles were made for datacharter-0.24.8.tar.gz:

Publisher: release.yml on datacharter/datacharter

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file datacharter-0.24.8-py3-none-any.whl.

File metadata

  • Download URL: datacharter-0.24.8-py3-none-any.whl
  • Upload date:
  • Size: 4.1 MB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for datacharter-0.24.8-py3-none-any.whl
Algorithm Hash digest
SHA256 a290911cf87d92c2506300ec1632c5536fff8c8c9f4a197cf70c19d1d96a91a7
MD5 f5aacba2809d9b0f2e8fb493b74d2fe9
BLAKE2b-256 d424076faaef0785aaaee9328df67241033db3ff8f3f5560a088c530231b5b66

See more details on using hashes here.

Provenance

The following attestation bundles were made for datacharter-0.24.8-py3-none-any.whl:

Publisher: release.yml on datacharter/datacharter

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.42.1

2 files

0.42.0

2 files

0.41.0

2 files

0.40.0

2 files

0.39.0

2 files

0.38.0

2 files

0.37.0

2 files

0.36.0

2 files

0.35.0

2 files

0.34.0

2 files

0.33.0

2 files

0.32.0

2 files

0.31.1

2 files

0.31.0

2 files

0.30.0

2 files

0.29.0

2 files

0.28.0

2 files

0.27.0

2 files

0.26.0

2 files

0.25.0

2 files

0.24.15

2 files

0.24.14

2 files

0.24.13

2 files

0.24.12

2 files

0.24.11

2 files

0.24.10

2 files

0.24.9

2 files

This release

0.24.8 This release

2 files

0.24.7

2 files

0.24.6

2 files

0.24.5

2 files

0.24.4

2 files

0.24.3

2 files

0.24.2

2 files

0.24.1

2 files

0.24.0

2 files

0.23.7

2 files

0.23.6

2 files

0.23.5

2 files

0.23.4

2 files

0.23.3

2 files

0.23.2

2 files

0.23.1

2 files

0.23.0

2 files

0.22.3

2 files

0.22.2

2 files

0.22.1

2 files

0.22.0

2 files

0.21.0

2 files

0.20.0

2 files

0.19.2

2 files

0.19.1

2 files

0.19.0

2 files

0.18.3

2 files

0.18.2

2 files

0.18.1

2 files

0.18.0

2 files

0.17.0

2 files

0.16.0

2 files

0.15.0

2 files

0.14.0

2 files

0.13.0

2 files

0.12.0

2 files

0.11.0

2 files

0.10.4

2 files

0.10.3

2 files

0.10.2

2 files

0.10.1

2 files

0.10.0

2 files

0.9.0

2 files

0.8.0

2 files

0.7.0

2 files

0.6.0

2 files

0.5.0

2 files

0.4.2

2 files

0.4.1

2 files

0.4.0

2 files

0.3.4

2 files

0.3.3

2 files

0.3.2

2 files

0.3.1

2 files

0.3.0

2 files

0.2.0

2 files

0.1.0

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page