A read-only Postgres role is the whole MCP security model
The GRANT is the only control a tool-calling agent can’t argue with: what it stops, the 11.7-minute scan it doesn’t, and the failure it never reaches.
- MCP
- Agents
- PostgreSQL
The GRANT is the only control a tool-calling agent can’t argue with: what it stops, the 11.7-minute scan it doesn’t, and the failure it never reaches.
Why the Claude Code install line fails in Command Prompt, the four errors that name your shell, and the 599-build gap before WSL 2 exists.
The difference between a workflow and an agent, costed end to end on an invented system called Lamplighter: 2.4x on a good run, 35x on a bad one, and the error rate that actually decides the build.
List prices fell 73.3% from Claude Opus 4.1 to Opus 5.5, and the same answer costs 2.687x more as a ten-turn loop. The caching crossover is 59.6%.
Twenty minutes, no deck. We’ll tell you straight whether this is work we should be doing, and if it isn’t, we usually know who should.
We come back within one business day.
Analytics
We’d like to use Google Analytics to see which pages people find useful. It sets cookies, and only if you say yes. Your choice can be changed at any time under Cookie settings. Privacy