Enterprises operating mature data warehouse and business intelligence (DW/BI) stacks face a structural barrier when adopting large language model (LLM)-powered analytics: their data surfaces, optimised for SQL clients and BI tools, lack the governed, tool-addressable interface required by AI agents. This paper proposes the MCP Data Bridge Architecture (MCPDB), a four-layer reference architecture that retrofits an MCP control plane onto existing DW/BI infrastructure — specifically Azure SQL Database, Azure Data Lake Storage Gen2, and Databricks — enabling any MCP-compatible AI agent to securely consume, query, and act on enterprise data without dismantling incumbent investments.
A 2025 Cloudera survey found that 96% of enterprises had integrated AI into core processes, yet a majority reported that transformative value remained elusive due to limitations of their existing data infrastructure. MuleSoft's 2025 connectivity benchmark reinforces this: 95% of IT leaders say integration issues directly impede their AI adoption plans.
The root cause is architectural. Data warehouses optimise for columnar storage, SQL access, and human-readable dashboards. They do not natively expose the tool-addressable, governed, schema-rich surfaces that LLM agents require. Three specific failure modes emerge:
arr_usd_contracted or churn_flag_30d encode institutional knowledge obvious to a trained analyst but opaque to a language model. Empirical benchmarks demonstrate a 17–23 percentage point accuracy gap between LLMs given a raw schema versus a curated semantic context document.
MCPDB is a four-layer reference architecture organised around a governed MCP control plane. The MCP boundary sits between the semantic/governance layer and the agent/consumption layer. Existing BI tools retain their SQL/DAX connections throughout — MCPDB is additive, not a replacement.
LangGraph · CrewAI · PydanticAI · Databricks AutoML · Power BI · Looker · Claude / GPT-4o · Custom agent workflows
Tool discovery · OAuth token propagation · RBAC enforcement · DDM pass-through · Audit logging · HITL gates · Prompt-injection defence
dbt Semantic Layer (MetricFlow) · Unity Catalog Metrics · Azure Purview / Microsoft Fabric · OpenMetadata · Data contracts · Vector store (AI Search)
dbt Core / dbt Cloud · Azure Data Factory · Databricks Workflows · Kafka + Spark Structured Streaming · Databricks AI Functions in SQL
Azure Data Lake Storage Gen2 · Delta Lake (Unity Catalog) · Azure SQL Database · Databricks Lakehouse · Apache Iceberg
The MCP server is an active governance layer, not a pass-through proxy. It forwards the agent's OAuth 2.0 token to the warehouse on every call (RBAC applies), enforces dynamic data masking, logs every tool call to a Unity Catalog audit table, and gates write-capable tools behind human-in-the-loop approval flows.
Certified metric definitions (dbt MetricFlow YAML) are served to agents as MCP Resources before query formulation. This ensures agents always use the approved calculation and filter logic rather than inferring them from raw schemas — the mechanism responsible for the 17–23pp accuracy improvement.
MCPDB evaluated against three alternative migration strategies:
| Strategy | Governance | Accuracy Gain | Migration Cost | BI Continuity |
|---|---|---|---|---|
| Full re-platforming | High | +17–23pp | Very High | Disrupted |
| Direct API exposure | Low | +4–9pp | Medium | Preserved |
| LLM-native warehouse | Medium | +15–20pp | High | Partial |
| MCPDB (proposed) | High | +17–23pp | Low–Medium | Fully preserved |
MCPDB suggests a concrete four-step additive sequence:
Published as an SSRN preprint, June 2026. Full text including all tables, reference implementation details, and 23-entry bibliography.
Read on SSRN Discuss this work