14 min read
A read-only Postgres role is the whole MCP security model
The GRANT is the only control a tool-calling agent can’t argue with: what it stops, the 11.7-minute scan it doesn’t, and the failure it never reaches.
- MCP
- Agents
- PostgreSQL