MaxQuery SQL Approval

MaxQuery SQL Approval is a native OpenClaw plugin that exposes guarded MaxCompute SQL execution.

It performs a trusted cost preflight before read-only SQL, requires approval above the configured CU threshold, and always requires approval for DDL and DML. Successful read queries may optionally be persisted as verified DataSet artifacts through maxquery-data-artifacts.

Install

openclaw plugins install npm:[email protected]
openclaw plugins install npm:[email protected]

The Gateway must provide a MaxCompute MCP server named maxcompute-mcp-server. The plugin reads OPENCLAW_GATEWAY_TOKEN for approval requests and optionally reads MAXCOMPUTE_MCP_URL to override the MCP URL discovered from openclaw.json.

Configuration

{
  "plugins": {
    "entries": {
      "maxquery-sql-approval": {
        "enabled": true,
        "config": {
          "approvalThresholdCu": 100
        }
      }
    }
  }
}

DDL and DML always require approval. approvalThresholdCu may lower, but cannot raise, the 100 CU product safety boundary.

License

Apache License 2.0.