shipped HiDataLinker 1.1.0 — local MCP + Skill so agents can use your DB sessions without ever seeing the secrets
idea: Claude / Codex / Cursor (etc.) talk to the running app over localhost MCP. HiDataLinker owns the connections and passwords; agents only get tool calls against sessions you already opened. no connection strings leave the machine.
security / access control:
- secrets stay in HiDataLinker (agents never see passwords or connection strings)
- MCP off by default; token only in ~/.hidatalinker/agent/endpoint.json (mode 600)
- connect reuses saved credentials — no password param
- query / preview are read-only (SELECT / WITH / EXPLAIN / SHOW / DESCRIBE); writes / dump / FOR UPDATE rejected
- preview capped at 1,000 rows; successful calls audited (last 40)
- Skill (skills/hidatalinker-db/) documents tools + these constraints for the agent host
release: https://github.com/henrybit/HiDataLinker/releases/tag/1.1.0
site: https://hidatalinker.onesolo.app/
GitHubRelease v1.1.0 · henrybit/HiDataLinker中文 Feature-1.1.0(修复dmg包无证书签名导致下载后显示损坏,无法使用问题) 版本:1.1.0 相对:1.0.0 的小版本功能更新 说明:只记录本版新增与行为变化,完整基线见 Feature-1.0.0.md。 本版主题 把正在运行的桌面客户端开放给外部智能体:其他 Agent 宿主通过可安装 Skill 和本机 MCP,操作 本应用里已经连上的会话,而不是自带数据库驱动...
commit d9c7a33