@imazhar101/mcp-bigquery-server 1.0.1 → 1.0.3

package/dist/servers/bigquery/src/index.js

@@ -54,7 +54,7 @@ class BigQueryServer {
                         isError: true,
                     };
                 }
-                const { rows, rowCount, schema, bytesProcessed, cacheHit, strippedFields } = result.data;
+                const { rows, rowCount, schema, bytesProcessed, cacheHit, strippedFields, } = result.data;
                 const headers = schema?.map((f) => f.name) ?? Object.keys(rows[0] ?? {});
                 const body = args.format === 'json'
                     ? formatAsJson(rows)

package/dist/servers/bigquery/src/services/bigquery-service.js

@@ -26,7 +26,6 @@ export class BigQueryService {
                 query: sql,
                 dryRun: true,
                 location: this.config.location,
-                defaultDataset: { projectId: billingProject },
             });
             const statementType = dryRunJob.metadata?.statistics?.query?.statementType ?? '';
             if (statementType !== 'SELECT') {
@@ -41,7 +40,6 @@ export class BigQueryService {
             const [job] = await this.client.createQueryJob({
                 query: sql,
                 location: this.config.location,
-                defaultDataset: { projectId: billingProject },
                 maximumBytesBilled: String(10 * 1024 * 1024 * 1024), // 10 GB safety cap
             });
             const [rows] = await job.getQueryResults({ maxResults: clampedRows });
@@ -94,11 +92,23 @@ export class BigQueryService {
         if (prevented.length === 0) {
             return { filteredRows: rows, filteredSchema: schema, strippedFields: [] };
         }
-        // Case-insensitive match against full field name or glob-style suffix (*_email, email_*)
-        const isBlocked = (name) => prevented.some((p) => name.toLowerCase() === p.toLowerCase());
+        // Case-insensitive substring match: a prevented token strips any column
+        // whose name contains it (e.g. `grm_email` strips `grm_email_one`,
+        // `grm_email_primary`). Substring is the only semantics that reliably
+        // catches real column sprawl; the BIGQUERY_PREVENTED_FIELDS list is curated
+        // to avoid over-broad tokens (e.g. `first_name`/`last_name`, never bare
+        // `name`). NOTE: output-column filtering is an accident guard, not an
+        // access boundary — it is bypassed by aliasing and does not cover PII used
+        // only in WHERE/JOIN/aggregates. Use allowedTables + governed views for that.
+        const isBlocked = (name) => {
+            const n = name.toLowerCase();
+            return prevented.some((p) => n.includes(p.toLowerCase()));
+        };
         const allFieldNames = schema.length > 0
             ? schema.map((f) => f.name)
-            : rows.length > 0 ? Object.keys(rows[0]) : [];
+            : rows.length > 0
+                ? Object.keys(rows[0])
+                : [];
         const strippedFields = allFieldNames.filter(isBlocked);
         if (strippedFields.length === 0) {
             return { filteredRows: rows, filteredSchema: schema, strippedFields: [] };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@imazhar101/mcp-bigquery-server",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "BigQuery MCP server — read-only query execution, schema exploration, dataset discovery",
   "type": "module",
   "main": "dist/servers/bigquery/src/index.js",