On-Premise Databases

Connect databases running inside private corporate networks to Metaustral using the On-Premise Agent — available on all plans, no firewall changes required.

Why can't I connect directly?

Cloud-hosted databases (RDS, Azure SQL, Cloud SQL) are reachable by IP from Metaustral. But databases running inside a private corporate network are typically blocked by firewalls and have no public IP. The Metaustral Agent solves this: a desktop application runs inside your network and uses Transfer Connections to connect to local databases and push only metadata to Metaustral over outbound HTTPS — no data ever leaves the network, and no inbound firewall ports need to be opened.

Supported databases

SQL Server

MySQL

PostgreSQL SQLite

How Transfer Connections work

Transfer Connections are configured inside the Metaustral Agent and define which local database to sync and how often. Each Transfer Connection counts as one database connection toward your plan limit.

graph LR subgraph private["🔒 Private / Corporate Network"] DB[(On-Premise DB)] TC[Transfer Connection\nScheduled sync] DB -->|INFORMATION_SCHEMA| TC end subgraph cloud["☁ Cloud — Metaustral"] API[Metaustral API] CAT[(Catalog)] API --> CAT end TC -->|Metadata only — HTTPS outbound port 443| API style private fill:#0f1e1a,stroke:#10b981,color:#f1f5f9 style cloud fill:#182830,stroke:#3D6478,color:#f1f5f9 style TC fill:#065f46,stroke:#10b981,color:#f1f5f9 style DB fill:#1e293b,stroke:#3D6478,color:#f1f5f9 style API fill:#1E3038,stroke:#9CC4D1,color:#f1f5f9 style CAT fill:#1e293b,stroke:#3D6478,color:#f1f5f9

Transfer Connection runs inside the private network → pushes only metadata outbound → no inbound firewall rules needed.

Security highlights

Outbound-only traffic: the agent makes HTTPS requests to Metaustral's API. No inbound ports need to be opened.
Metadata only: Transfer Connections read only schema definitions (table names, column names, data types) — never actual row data.
Credentials stay local: database credentials are stored inside the agent on your machine and are never sent to the cloud.
Encrypted transport: all communication between the agent and Metaustral uses TLS 1.2+.

Available on all plans The On-Premise Agent is available on every plan including Free. Each synchronized database counts as one connection toward your plan limit. See pricing →

For full setup instructions, see the On-Premise Agent documentation →