Read-only MCP server for Trino: queries run as the verified user, and Trino's own policies decide.
Connect Runs on your machine
claude mcp add akko-mcp-trino -e TRINO_HOST=<TRINO_HOST> -e TRINO_HTTP_SCHEME=<TRINO_HTTP_SCHEME> -e MCP_JWKS_URL=<MCP_JWKS_URL> -e MCP_OIDC_ISSUER=<MCP_OIDC_ISSUER> -e MCP_OIDC_AUDIENCE=<MCP_OIDC_AUDIENCE> -e TRINO_TOKEN_EXCHANGE_URL=<TRINO_TOKEN_EXCHANGE_URL> -e TRINO_TOKEN_EXCHANGE_CLIENT_ID=<TRINO_TOKEN_EXCHANGE_CLIENT_ID> -e TRINO_TOKEN_EXCHANGE_CLIENT_SECRET=<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET> -e TRINO_TOKEN_EXCHANGE_AUDIENCE=<TRINO_TOKEN_EXCHANGE_AUDIENCE> -e TRINO_IDENTITY_MODE=<TRINO_IDENTITY_MODE> -e MCP_USER_TOKEN=<MCP_USER_TOKEN> -- uvx akko-mcp-trino==0.8.0
{
"mcpServers": {
"akko-mcp-trino": {
"command": "uvx",
"args": [
"akko-mcp-trino==0.8.0"
],
"env": {
"TRINO_HOST": "<TRINO_HOST>",
"TRINO_HTTP_SCHEME": "<TRINO_HTTP_SCHEME>",
"MCP_JWKS_URL": "<MCP_JWKS_URL>",
"MCP_OIDC_ISSUER": "<MCP_OIDC_ISSUER>",
"MCP_OIDC_AUDIENCE": "<MCP_OIDC_AUDIENCE>",
"TRINO_TOKEN_EXCHANGE_URL": "<TRINO_TOKEN_EXCHANGE_URL>",
"TRINO_TOKEN_EXCHANGE_CLIENT_ID": "<TRINO_TOKEN_EXCHANGE_CLIENT_ID>",
"TRINO_TOKEN_EXCHANGE_CLIENT_SECRET": "<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET>",
"TRINO_TOKEN_EXCHANGE_AUDIENCE": "<TRINO_TOKEN_EXCHANGE_AUDIENCE>",
"TRINO_IDENTITY_MODE": "<TRINO_IDENTITY_MODE>",
"MCP_USER_TOKEN": "<MCP_USER_TOKEN>"
}
}
}
}
{
"mcpServers": {
"akko-mcp-trino": {
"command": "uvx",
"args": [
"akko-mcp-trino==0.8.0"
],
"env": {
"TRINO_HOST": "<TRINO_HOST>",
"TRINO_HTTP_SCHEME": "<TRINO_HTTP_SCHEME>",
"MCP_JWKS_URL": "<MCP_JWKS_URL>",
"MCP_OIDC_ISSUER": "<MCP_OIDC_ISSUER>",
"MCP_OIDC_AUDIENCE": "<MCP_OIDC_AUDIENCE>",
"TRINO_TOKEN_EXCHANGE_URL": "<TRINO_TOKEN_EXCHANGE_URL>",
"TRINO_TOKEN_EXCHANGE_CLIENT_ID": "<TRINO_TOKEN_EXCHANGE_CLIENT_ID>",
"TRINO_TOKEN_EXCHANGE_CLIENT_SECRET": "<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET>",
"TRINO_TOKEN_EXCHANGE_AUDIENCE": "<TRINO_TOKEN_EXCHANGE_AUDIENCE>",
"TRINO_IDENTITY_MODE": "<TRINO_IDENTITY_MODE>",
"MCP_USER_TOKEN": "<MCP_USER_TOKEN>"
}
}
}
}
{
"servers": {
"akko-mcp-trino": {
"type": "stdio",
"command": "uvx",
"args": [
"akko-mcp-trino==0.8.0"
],
"env": {
"TRINO_HOST": "<TRINO_HOST>",
"TRINO_HTTP_SCHEME": "<TRINO_HTTP_SCHEME>",
"MCP_JWKS_URL": "<MCP_JWKS_URL>",
"MCP_OIDC_ISSUER": "<MCP_OIDC_ISSUER>",
"MCP_OIDC_AUDIENCE": "<MCP_OIDC_AUDIENCE>",
"TRINO_TOKEN_EXCHANGE_URL": "<TRINO_TOKEN_EXCHANGE_URL>",
"TRINO_TOKEN_EXCHANGE_CLIENT_ID": "<TRINO_TOKEN_EXCHANGE_CLIENT_ID>",
"TRINO_TOKEN_EXCHANGE_CLIENT_SECRET": "<TRINO_TOKEN_EXCHANGE_CLIENT_SECRET>",
"TRINO_TOKEN_EXCHANGE_AUDIENCE": "<TRINO_TOKEN_EXCHANGE_AUDIENCE>",
"TRINO_IDENTITY_MODE": "<TRINO_IDENTITY_MODE>",
"MCP_USER_TOKEN": "<MCP_USER_TOKEN>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
TRINO_HOSTRequired | Trino coordinator host |
TRINO_HTTP_SCHEMERequired | https (required by the default identity mode) |
MCP_JWKS_URLRequired | JWKS endpoint of the OIDC provider |
MCP_OIDC_ISSUERRequired | Expected token issuer |
MCP_OIDC_AUDIENCERequired | The audience of tokens issued for this server (never Trino's) |
TRINO_TOKEN_EXCHANGE_URLOptional | Token endpoint for OAuth 2.0 Token Exchange (jwt mode) |
TRINO_TOKEN_EXCHANGE_CLIENT_IDOptional | This server's client at the provider (jwt mode) |
TRINO_TOKEN_EXCHANGE_CLIENT_SECRETOptional, secret | Its secret (jwt mode) |
TRINO_TOKEN_EXCHANGE_AUDIENCEOptional | The audience Trino accepts (jwt mode) |
TRINO_IDENTITY_MODEOptional | jwt (default), impersonation, oauth2 (Trino browser login, stdio only; needs the door open, MCP_AUTH_REQUIRED=false, or a verified MCP_USER_TOKEN), or service |
MCP_USER_TOKENRequired, secret | The user's bearer token, issued for this server (stdio transport) |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 12 Nov 2026 |
| Last updated | 12 Nov 2026 |
| Registry name | io.github.ab2dridi/akko-mcp-trino |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
