NestDaddy

AKKO MCP server for Trino

io.github.ab2dridi/akko-mcp-trino · v0.8.0

Read-only MCP server for Trino: queries run as the verified user, and Trino's own policies decide.

Connect Runs on your machine

Terminal
claude mcp add akko-mcp-trino -e TRINO_HOST=<TRINO_HOST> -e TRINO_HTTP_SCHEME=<TRINO_HTTP_SCHEME> -e MCP_JWKS_URL=<MCP_JWKS_URL> -e MCP_OIDC_ISSUER=<MCP_OIDC_ISSUER> -e MCP_OIDC_AUDIENCE=<MCP_OIDC_AUDIENCE> -e TRINO_TOKEN_EXCHANGE_URL=<TRINO_TOKEN_EXCHANGE_URL> -e TRINO_TOKEN_EXCHANGE_CLIENT_ID=<TRINO_TOKEN_EXCHANGE_CLIENT_ID> -e TRINO_TOKEN_EXCHANGE_CLIENT_SECRET=<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET> -e TRINO_TOKEN_EXCHANGE_AUDIENCE=<TRINO_TOKEN_EXCHANGE_AUDIENCE> -e TRINO_IDENTITY_MODE=<TRINO_IDENTITY_MODE> -e MCP_USER_TOKEN=<MCP_USER_TOKEN> -- uvx akko-mcp-trino==0.8.0
claude_desktop_config.json
{
  "mcpServers": {
    "akko-mcp-trino": {
      "command": "uvx",
      "args": [
        "akko-mcp-trino==0.8.0"
      ],
      "env": {
        "TRINO_HOST": "<TRINO_HOST>",
        "TRINO_HTTP_SCHEME": "<TRINO_HTTP_SCHEME>",
        "MCP_JWKS_URL": "<MCP_JWKS_URL>",
        "MCP_OIDC_ISSUER": "<MCP_OIDC_ISSUER>",
        "MCP_OIDC_AUDIENCE": "<MCP_OIDC_AUDIENCE>",
        "TRINO_TOKEN_EXCHANGE_URL": "<TRINO_TOKEN_EXCHANGE_URL>",
        "TRINO_TOKEN_EXCHANGE_CLIENT_ID": "<TRINO_TOKEN_EXCHANGE_CLIENT_ID>",
        "TRINO_TOKEN_EXCHANGE_CLIENT_SECRET": "<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET>",
        "TRINO_TOKEN_EXCHANGE_AUDIENCE": "<TRINO_TOKEN_EXCHANGE_AUDIENCE>",
        "TRINO_IDENTITY_MODE": "<TRINO_IDENTITY_MODE>",
        "MCP_USER_TOKEN": "<MCP_USER_TOKEN>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "akko-mcp-trino": {
      "command": "uvx",
      "args": [
        "akko-mcp-trino==0.8.0"
      ],
      "env": {
        "TRINO_HOST": "<TRINO_HOST>",
        "TRINO_HTTP_SCHEME": "<TRINO_HTTP_SCHEME>",
        "MCP_JWKS_URL": "<MCP_JWKS_URL>",
        "MCP_OIDC_ISSUER": "<MCP_OIDC_ISSUER>",
        "MCP_OIDC_AUDIENCE": "<MCP_OIDC_AUDIENCE>",
        "TRINO_TOKEN_EXCHANGE_URL": "<TRINO_TOKEN_EXCHANGE_URL>",
        "TRINO_TOKEN_EXCHANGE_CLIENT_ID": "<TRINO_TOKEN_EXCHANGE_CLIENT_ID>",
        "TRINO_TOKEN_EXCHANGE_CLIENT_SECRET": "<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET>",
        "TRINO_TOKEN_EXCHANGE_AUDIENCE": "<TRINO_TOKEN_EXCHANGE_AUDIENCE>",
        "TRINO_IDENTITY_MODE": "<TRINO_IDENTITY_MODE>",
        "MCP_USER_TOKEN": "<MCP_USER_TOKEN>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "akko-mcp-trino": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "akko-mcp-trino==0.8.0"
      ],
      "env": {
        "TRINO_HOST": "<TRINO_HOST>",
        "TRINO_HTTP_SCHEME": "<TRINO_HTTP_SCHEME>",
        "MCP_JWKS_URL": "<MCP_JWKS_URL>",
        "MCP_OIDC_ISSUER": "<MCP_OIDC_ISSUER>",
        "MCP_OIDC_AUDIENCE": "<MCP_OIDC_AUDIENCE>",
        "TRINO_TOKEN_EXCHANGE_URL": "<TRINO_TOKEN_EXCHANGE_URL>",
        "TRINO_TOKEN_EXCHANGE_CLIENT_ID": "<TRINO_TOKEN_EXCHANGE_CLIENT_ID>",
        "TRINO_TOKEN_EXCHANGE_CLIENT_SECRET": "<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET>",
        "TRINO_TOKEN_EXCHANGE_AUDIENCE": "<TRINO_TOKEN_EXCHANGE_AUDIENCE>",
        "TRINO_IDENTITY_MODE": "<TRINO_IDENTITY_MODE>",
        "MCP_USER_TOKEN": "<MCP_USER_TOKEN>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
TRINO_HOST
Required
Trino coordinator host
TRINO_HTTP_SCHEME
Required
https (required by the default identity mode)
MCP_JWKS_URL
Required
JWKS endpoint of the OIDC provider
MCP_OIDC_ISSUER
Required
Expected token issuer
MCP_OIDC_AUDIENCE
Required
The audience of tokens issued for this server (never Trino's)
TRINO_TOKEN_EXCHANGE_URL
Optional
Token endpoint for OAuth 2.0 Token Exchange (jwt mode)
TRINO_TOKEN_EXCHANGE_CLIENT_ID
Optional
This server's client at the provider (jwt mode)
TRINO_TOKEN_EXCHANGE_CLIENT_SECRET
Optional, secret
Its secret (jwt mode)
TRINO_TOKEN_EXCHANGE_AUDIENCE
Optional
The audience Trino accepts (jwt mode)
TRINO_IDENTITY_MODE
Optional
jwt (default), impersonation, oauth2 (Trino browser login, stdio only; needs the door open, MCP_AUTH_REQUIRED=false, or a verified MCP_USER_TOKEN), or service
MCP_USER_TOKEN
Required, secret
The user's bearer token, issued for this server (stdio transport)

Details

Package[email protected] (PYPI, stdio)
First published12 Nov 2026
Last updated12 Nov 2026
Registry nameio.github.ab2dridi/akko-mcp-trino

More other servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.