QueryDesk

QueryDesk connects Claude to your company's databases through the same controls a person's queries go through.

QueryDesk redacts before the query runs. It rewrites each query under your data protection policies, so the database returns *** in place of a protected value. Claude is redacted at least as much as the person it acts for, and a database's AI policy can redact more. The schema tools mark redacted columns, so Claude knows before it writes SQL. When someone needs a redacted column, Claude files an access request and a super admin decides.

On a credential that requires review, Claude gets back a pending query and no rows. A teammate approves the exact SQL, and Claude then runs it unchanged. Claude can't approve its own query.

Every query Claude runs is in the audit log, with the person it ran as and the AI badge. The audit log stream sends the same record to your SIEM.

AI access is off on every new database until an admin turns it on. On a database set to read-only for AI, QueryDesk's parser refuses writes, and PostgreSQL, MySQL, Oracle and ClickHouse refuse them too.

Claude can list databases and read their schema, search columns across databases, run and cancel queries, fetch results, use saved and shared queries, search the audit log, and request access to a redacted column.

QueryDesk works with PostgreSQL, MySQL, SQL Server, Oracle, ClickHouse, MongoDB, CockroachDB, TiDB, OceanBase, TimescaleDB, MariaDB and Amazon Redshift. You sign in with your company login. It is free for one user, then $12 per user a month with every feature included. A new organization on QueryDesk Cloud can add read-only sample databases at sign-up and try it before connecting its own.