Skip to content

Configuration

Configure the mcp-trino server using environment variables or configuration files.

Connection Settings

Variable Description Default
TRINO_HOST Trino server hostname localhost
TRINO_PORT Server port 443 (SSL) / 8080
TRINO_USER Authentication username (required)
TRINO_PASSWORD Authentication password (optional)
TRINO_CATALOG Default catalog memory
TRINO_SCHEMA Default schema default
TRINO_SSL Enable HTTPS true for remote hosts
TRINO_SSL_VERIFY Verify SSL certificates true
TRINO_TIMEOUT Query timeout (seconds) 120
TRINO_SOURCE Client identifier mcp-trino

Example: Remote Server

export TRINO_HOST=trino.example.com
export TRINO_USER=analyst
export TRINO_PASSWORD=secret
export TRINO_CATALOG=hive
export TRINO_SCHEMA=default

Example: Local Development

export TRINO_HOST=localhost
export TRINO_PORT=8080
export TRINO_USER=admin
export TRINO_SSL=false
export TRINO_CATALOG=memory

Extensions

Variable Description Default
MCP_TRINO_EXT_READONLY Block write operations true
MCP_TRINO_EXT_ERRORS Add helpful hints to errors true
MCP_TRINO_EXT_LOGGING Enable request logging false
MCP_TRINO_EXT_METRICS Enable metrics collection false
MCP_TRINO_EXT_QUERYLOG Log all SQL queries false
MCP_TRINO_EXT_METADATA Add execution stats to results false

Read-Only Mode

Enabled by default. Blocks these statements:

  • INSERT, UPDATE, DELETE
  • DROP, CREATE, ALTER
  • TRUNCATE, MERGE

To allow write operations:

export MCP_TRINO_EXT_READONLY=false

Warning

Only disable read-only mode when necessary and with appropriate Trino permissions.

Logging

Enable structured JSON logging:

export MCP_TRINO_EXT_LOGGING=true

Output: 

{"event":"request_start","tool":"trino_query","request_id":"abc123"}
{"event":"request_success","tool":"trino_query","duration_ms":150}

File-Based Configuration

For production deployments, use a YAML configuration file:

# /etc/mcp-trino/config.yaml
trino:
  host: trino.example.com
  port: 443
  user: ${TRINO_USER}           # Environment variable expansion
  password: ${TRINO_PASSWORD}
  catalog: hive
  schema: default
  ssl: true
  ssl_verify: true
  timeout: 120s

toolkit:
  default_limit: 1000
  max_limit: 10000
  default_timeout: 120s
  max_timeout: 300s

extensions:
  readonly: true
  logging: true
  metrics: false
  errors: true

Load with:

export MCP_TRINO_CONFIG=/etc/mcp-trino/config.yaml
export TRINO_USER=service_account
export TRINO_PASSWORD=secret
mcp-trino

Configuration Precedence

  1. Environment variables (highest priority)
  2. Configuration file
  3. Defaults (lowest priority)

This allows base settings in a config file with secrets from environment variables.

Docker Configuration

Environment Variables

docker run --rm -i \
  -e TRINO_HOST=trino.example.com \
  -e TRINO_USER=analyst \
  -e TRINO_PASSWORD=secret \
  -e MCP_TRINO_EXT_LOGGING=true \
  ghcr.io/txn2/mcp-trino:latest

Config File Mount

docker run --rm -i \
  -v /path/to/config.yaml:/etc/mcp-trino/config.yaml \
  -e MCP_TRINO_CONFIG=/etc/mcp-trino/config.yaml \
  -e TRINO_PASSWORD=secret \
  ghcr.io/txn2/mcp-trino:latest

Kubernetes

ConfigMap

apiVersion: v1
kind: ConfigMap
metadata:
  name: mcp-trino-config
data:
  config.yaml: |
    trino:
      host: trino.prod.svc.cluster.local
      port: 8080
      user: ${TRINO_USER}
      password: ${TRINO_PASSWORD}
      catalog: hive
      ssl: false
    extensions:
      readonly: true
      logging: true

Secret

apiVersion: v1
kind: Secret
metadata:
  name: trino-credentials
type: Opaque
stringData:
  username: service_account
  password: your-secret-password

Deployment

apiVersion: apps/v1
kind: Deployment
metadata:
  name: mcp-trino
spec:
  template:
    spec:
      containers:
      - name: mcp-trino
        image: ghcr.io/txn2/mcp-trino:latest
        env:
        - name: MCP_TRINO_CONFIG
          value: /etc/mcp-trino/config.yaml
        - name: TRINO_USER
          valueFrom:
            secretKeyRef:
              name: trino-credentials
              key: username
        - name: TRINO_PASSWORD
          valueFrom:
            secretKeyRef:
              name: trino-credentials
              key: password
        volumeMounts:
        - name: config
          mountPath: /etc/mcp-trino
      volumes:
      - name: config
        configMap:
          name: mcp-trino-config

Next Steps