Every feature page, grouped as in the sidebar. New to Beacon? Read Core concepts first,
then the Quick start.
| Page | What it covers |
|---|
| Data sources | Nine connectors (PostgreSQL, SQL Server, MySQL, Azure Synapse, Snowflake, BigQuery, Databricks, AWS CloudWatch, REST API), encrypted connections, metadata, and per-engine read-only guarantees. |
| Queries | Saved, versioned SQL: steps across data sources, bound {name} parameters, an in-memory final query, and optional change review. |
| Subscriptions | Run a query on a cron schedule as its owner, decide which runs notify, and choose what each notification carries. |
| Notifications | Five channels (Email, Teams, Slack, Jira and Webhook) to vetted recipients, with a delivery history. |
| Control Tower | Health across every subscription: success rates, health buckets, open tasks and anomaly sparklines. |
| Tasks | Work items a subscription opens while its query returns rows, resolved automatically when the data recovers. |
| Anomaly detection | Notify only when a run’s row count is unusual against its own history. |
| Data quality | Data contracts with rule-based checks, a quality score and alerts, on PostgreSQL, SQL Server and MySQL. |
| Data migration | Copy rows from a read source into a database an Admin marked as a write target. Off unless the host enables it. |
| Page | What it covers |
|---|
| MCP server | The governed MCP endpoint at /beacon/mcp: eight built-in tools, project scoping, read-only SQL and PII masking. |
| Entra ID callers | Calling MCP with Microsoft Entra ID tokens, on behalf of a user or as a system identity. |
| Saved query tools | Approved saved queries exposed as named, read-only MCP tools. |
| Host endpoint tools | Selected host endpoints exposed as MCP tools, run in-process as the caller. |
| Host DbContext | The host’s own EF Core model as a read-only data source with an allow-list and masking. |
| Host docs | The host’s markdown documentation imported into a project and searchable over MCP. |
| Knowledge base & grounding | What Beacon gives the model before it writes SQL: schema, relationships, glossary, golden examples, learned patterns. |
| AI integration | Experimental: generated data source documentation and natural-language alerts through a swappable LLM provider. |
| AI actors | Experimental: LLM-driven monitoring agents whose plans a person approves before anything runs. |
| MCP observability & audit | The audit row behind every MCP tool call, trace correlation and OpenTelemetry export. |
| Page | What it covers |
|---|
| Security model | The trust boundaries, deployment locks and guarantees in one place. |
| Authorization | Projects as the access boundary, project roles and actions, functional permissions, and host seams. |
| Approvals | The opt-in four-eyes review of query changes, migration jobs, Custom SQL rules and recipient destinations. |
| User management | Users, roles, password and SSO sign-in, and the first-run setup. |
| API keys | Read and Execute keys bound to their owner, with project lists and a mandatory expiry, stored hashed. |
| Security audit trail | An append-only, signed record of sign-ins and of changes to identities, keys, access, data sources, delivery, settings, approvals and curation, read and verified by an Auditor and copied to the Beacon.Audit log stream. |
| Admin settings | Runtime settings: the LLM provider, the base URL, and their change history. |
For configuration keys see Configuration; to embed Beacon in your own application
see Integrate Beacon.
