hs-sql-agent

SQL MCP security features

Validate AI-generated SQL, enforce server-side access policy, and gate database mutations before execution.

SQL Compiler

Fail-closed SQL compiler

hs-sql-agent parses SQL into a typed compiler pipeline, validates source semantics and policy, proves target capabilities, and only then emits provider-specific SQL.

Learn more →

Safe DML

Safe DML with atomic transaction approval

execute_dml_sql handles one or more supported mutations through preview, approval, commit-time revalidation, and one server-owned atomic transaction. MCP Elicitation is the default approval path, with official Webhook and custom provider options.

Learn more →

Governance

Database access control for AI agents

Scope every MCP key to the database, tools, tables, rate limits, and runtime policy you intend to expose. The LLM does not get to redefine those boundaries.

Learn more →