Skip to content

Conversation

@phineas-parentsquare
Copy link

Jira Ticket

https://dewsly.atlassian.net/browse/AIP-308

Summary of Changes

This PR adds support for user/password authentication to the Redshift MCP server, in addition to the existing IAM authentication method. This allows the MCP server to connect to Redshift clusters using database credentials, specifically for the sagemaker_readonly user through the ps_dsa profile.

Changes Made

  • Added RedshiftAuthConfig model for authentication configuration
  • Added support for user/password authentication in execute_statement function
  • Updated tool definitions to include authentication parameters
  • Updated documentation to reflect new authentication options

Usage

To use user/password authentication, you can either:

  1. Set environment variables:

    • REDSHIFT_AUTH_TYPE=user_password
    • REDSHIFT_USERNAME=
    • REDSHIFT_PASSWORD=
  2. Or provide parameters directly to the MCP tools:

    • auth_type: "user_password"
    • username: ""
    • password: ""

Testing Performed

Manually tested the changes to ensure both authentication methods work correctly.

Co-authoring

This PR was created by Phineas on behalf of Daniel Foguelman <>.
All commits include the co-author line:

Modified to pass username to execute-statement and batch statement
Added a username auth option that allows to pull a different username
and use default temp creds mechanisms.
@TuringND TuringND force-pushed the phineas/feature/AIP-308/add-redshift-user-password-auth branch from 9a58230 to 4c8db86 Compare September 19, 2025 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants