I Didn't Want My AI Agent to Have a Database Password, So I Built a Gateway
go
dev.to
The first version of the idea was embarrassingly simple. Give the agent a database URL, let it write SQL, run the query, and send the rows back to the model. It would have made a nice demo. It also would have made a terrible system. The problem wasn't only that a model might produce a DROP TABLE. A read-only user can still run a query that scans half a warehouse, hold connections open, join against a table it was never supposed to see, or return far more data than the agent actually needs. A