vv-pilot-mcp 0.2.1

MCP server for QA database access and k8s logs

vv-pilot-mcp

MCP server for accessing QA databases and k8s logs via Amazon Q / Copilot.

Installation

Option 1: uvx (no install required)

Add to your MCP config (~/.aws/amazonq/mcp.json or .amazonq/mcp.json in your workspace):

{
  "mcpServers": {
    "qa-server": {
      "command": "uvx",
      "args": ["vv-pilot-mcp"],
      "timeout": 60000,
      "disabled": false
    }
  }
}

This auto-downloads and runs the server on demand. Requires uv installed.

Option 2: pipx (global install)

pipx install vv-pilot-mcp

Then add to your MCP config:

{
  "mcpServers": {
    "qa-server": {
      "command": "vv-pilot-mcp",
      "timeout": 60000,
      "disabled": false
    }
  }
}

To update later:

pipx upgrade vv-pilot-mcp

First-Time Setup

On first use, the server will prompt you for:

1. SSH password — your jump host password
2. DB jump host — SSH alias for the DB jump host (e.g. qa-psql-1.qa-new)
3. Vault forward host — SSH alias for the vault tunnel (e.g. vault-np-forward-new)

All values are saved securely to ~/.config/qa-mcp/.env (chmod 600) and reused automatically on subsequent sessions.

Usage

1. Open Amazon Q chat and say: "Connect to QA database"
2. The server will:
   • SSH to the DB jump host (opens browser for OIDC approval on first session)
   • Start the vault forward tunnel
   • Open the Vault UI in your browser
3. Copy the vault token from your profile and paste it in chat
4. You're connected! Now ask things like:
   • "List all schemas"
   • "Find the latest visit from retrobranch1"
   • "Update discharge date for visit id 1234"

Available Tools

Tool	Description
set_password	Set SSH password (saved for future sessions)
set_config	Set any config value (saved for future sessions)
connect_db_jump_host	SSH to DB jump host
start_vault_forward	Start vault tunnel
open_vault_ui	Open vault UI in browser
set_vault_token	Set vault token from browser
connect_database	Get credentials and connect via psql
query	Run SQL query
list_schemas	List database schemas
list_tables	List tables in a schema
describe_table	Describe table columns
k8s_logs	Get pod logs
k8s_pods	List pods
connection_status	Check connection state
disconnect	Tear down all sessions

Configuration

All config is stored in ~/.config/qa-mcp/.env:

QA_SSH_PASSWORD=<your-password>
QA_DB_JUMP_HOST=qa-psql-1.qa-new
QA_VAULT_JUMP_HOST=vault-np-forward-new
QA_VAULT_URL=https://localhost:18200
QA_VAULT_OIDC_ACCOUNT=[e-mail]
QA_DEFAULT_CLUSTER=qa-cluster-1
QA_DEFAULT_DB=iodine
QA_DEFAULT_USER_TYPE=dba

You can also set these as environment variables to override the file.

Prerequisites

• SSH config with aliases for your jump hosts
• Access to the QA environment (OIDC)
• uv (for Option 1) or pipx (for Option 2)

Development

git clone [e-mail]:vijayveeramani/vv-pilot-mcp.git
cd vv-pilot-mcp
python -m venv .venv
source .venv/bin/activate
pip install -e .

Release Workflow

1. Bump version in pyproject.toml
2. Commit, tag, and push:

   git add -A && git commit -m "v0.x.0: description"
   git tag v0.x.0
   git push origin main --tags
   

3. Build and publish to PyPI:

   rm -rf dist/
   python -m build
   twine upload dist/*