A read-only Postgres role is the whole MCP security model
The GRANT is the only control a tool-calling agent can’t argue with: what it stops, the 11.7-minute scan it doesn’t, and the failure it never reaches.
- MCP
- Agents
- PostgreSQL
The GRANT is the only control a tool-calling agent can’t argue with: what it stops, the 11.7-minute scan it doesn’t, and the failure it never reaches.
An AI-built prototype arrives with one index per table, a secret in the bundle and no schema history. Where the break-even sits, and what to repair.
Idempotency key retention derived from the counterparty’s published replay horizons: 24 hours outbound, 35 days inbound, and the storage arithmetic for both.
The replication slot is what breaks when you stream Postgres to a lakehouse: a stopped consumer pins write-ahead log on the source until the volume fills.
A Postgres helper left at the default VOLATILE costs an index condition and a row estimate: a tenant holding 0.1% of 40,000,000 rows reads all of them.
Twenty minutes, no deck. We’ll tell you straight whether this is work we should be doing, and if it isn’t, we usually know who should.
We come back within one business day.
Analytics
We’d like to use Google Analytics to see which pages people find useful. It sets cookies, and only if you say yes. Your choice can be changed at any time under Cookie settings. Privacy