Read-only Postgres MCP: restrict the tables an agent can query
Use database grants, restricted views, and row-level security to control a Postgres MCP connection. Includes a runnable synthetic fixture.
Blog
Working with databases and AI agents. Practical examples, tested configurations, and the tradeoffs behind them.
Postgres MCP permissions compared: read-only access, database grants, and predefined tools
A reproducible lab comparing DBHub, Google MCP Toolbox, and Crystal DBA across database grants, read-only execution, and custom tool catalogs.
Expose a reviewed Postgres query as an MCP tool
Configure a named Postgres query in Google MCP Toolbox, verify its input handling, and check that generic SQL isn't exposed beside it.
MCP for databases: choose an access model before a server
A practical guide to database MCP patterns: local exploration, vendor-managed servers, self-hosted frameworks, and reviewed hosted tools.
MCP tools vs. text-to-SQL: match the interface to the question
Compare reviewed MCP database tools with text-to-SQL for exploration, repeatability, governance, maintenance, and client experience.