Ana içeriğe atla

Why raw Text-to-SQL fails security audits and how deterministic Zod tools, AGENT_SURFACE allow-lists, and scoped metering protect tenant data

Connecting AI Agents Safely to Production Databases with MCP

Giving an LLM direct SQL execution access is the fastest way to leak cross-tenant data or lock up production tables. Here is how Model Context Protocol (MCP) creates an auditable, rate-limited security boundary.

24 Ekim 2026• 8 dk okuma• Kelimeler Sajjad Samaei
Sajjad Samaei, product designer and full-stack engineer

Model Context Protocol gateway enforcing tenant isolation and per-key unit metering

Model Context Protocol gateway enforcing tenant isolation and per-key unit metering
İçindekiler

Giving a Large Language Model direct SQL execution access is the shortest path to cross-tenant data leaks or production database outages. Engineering teams that wired raw Text-to-SQL into early AI assistants quickly ran into prompt injection, unindexed cross-joins, and bypassed application-level RBAC. Implementing a Model Context Protocol (MCP) gateway replaces arbitrary query generation with deterministic, Zod-validated tools.

The Three Failure Modes of Raw Text-to-SQL

  1. Bypassed Application RBAC: Tenant isolation usually lives in service code, not database roles.
  2. Accidental Denial of Service: Unbounded joins across multi-million-row tables saturate CPU.
  3. Schema & PII Exposure: Feeding raw table schemas and unredacted customer fields into model context expands the attack surface.

Enforcing AGENT_SURFACE and AGENT_NEVER Boundaries

In Sajjad Studio's Agent API, every Payload CMS collection is explicitly classified into AGENT_SURFACE (field-level allow-list + automatic PII redaction), AGENT_NEVER (keys, sessions, encrypted messages, financial ledgers), or AGENT_DEFERRED. Combined with SHA-256 hashed keys (ak_<prefix>_<secret>) and monthly unit metering, agents only ever see the tools their scope unlocks.

Explore our custom MCP and AI architecture offerings on the Sajjad Studio services page.

makaleyi paylaş

İlgili Makaleler

Ürün işçiliği ve uygulaması hakkında okumaya devam edin.

26 Eki 2026 · 7 dk.

MCP-Native Client Portals: Connecting Claude and ChatGPT Safely to Project Status & Billing

Modern B2B clients want to ask their AI assistant 'Where does our project stand and which invoices are due?' without navigating complex dashboards. Here is the security architecture behind Sajjad Studio's Client Portal MCP.

Oku

22 Eki 2026 · 6 dk.

Resilient B2B App Shell Architecture in Next.js 16

Enterprise operators spending eight hours a day in a financial or operations dashboard shouldn't see repeated sidebar skeletons or layout shifts on every tab switch. Here is how we engineer desktop-grade app shells in Next.js 16.

Oku

Aklınızda bir proje var mı?

Bize yazın; Bir sonraki adımı birlikte belirlemek için 24 saat içinde yanıt veriyoruz.

Projeyi BaşlatÇalışmayı Görüntüle