drc-scanner 0.2.0

Data Revenue Connecter — read-only database profiling agent that builds a signed Data Passport

DRC Scanner — Data Revenue Connecter

A read-only database profiling agent. It runs inside your own network, profiles your database, and produces a small, human-readable, signed Data Passport — a JSON file of aggregate statistics only. Your raw data never leaves your machine. You then upload the Passport to app.datarevenue.io to auto-fill your data valuation questionnaire.

What leaves your network

Nothing during the scan. The scanner makes zero network calls while profiling. The only artifact produced is the Data Passport (drc_passport_<date>.json) — column names, row counts, and aggregate metrics. Never row values, never sample data. You can inspect the entire file before uploading it.

Install & run

# Option 1 — pip
pip install drc-scanner
drc-scan run --connect postgresql://readonly@host:5432/proddb

# Option 2 — Docker (no Python required)
docker run -it datarevenue/scanner \
  --connect postgresql://[e-mail]:5432/proddb

Output:

drc_passport_2026-06-11.json   (the Data Passport)
+ on-screen inventory summary and upload instructions

Create a read-only database user first

drc-scan setup --db postgres

This prints the exact SQL to create a least-privilege, read-only role so the scanner can never modify your data — copy-paste it for your DBA.

Safety guarantees

• Read-only enforced in code. Every query passes through a verb allow-list; INSERT, UPDATE, DELETE, and all DDL raise a hard error before reaching the database.
• No raw export. The Passport builder rejects any field containing row-level values.
• Offline scan. No network egress during profiling — verifiable with a firewall rule.
• Signed & hashed. Each Passport carries a SHA-256 content hash (Ed25519 signing added in the next build) so the platform can detect tampering.

Status

v0.1 skeleton: Postgres connector, table/column inventory, record counts, Passport with content hash. Full metric engine, PII detection, additional connectors, and Ed25519 signing follow in subsequent builds.