Let Claude Code read your production database — even a write disguised as SELECT gets refused

Описание и применение

Claude Code может безопасно читать данные из продакшн‑базы, используя dbboard-mcp, который обеспечивает только чтение через парсинг SQL и режимы read‑only в базе, защищая пароли и ограничивая результаты.

Задача

Enabling an AI agent to safely read from a production database without risking accidental writes.

Результат

Agents can query production databases safely; write attempts are blocked by parsing and read‑only transactions, passwords stay in the OS keychain, and results are bounded.

Рабочий процесс

• 1. Download dbboard-mcp for your OS.
• 2. Add the mcp to Claude with claude mcp add dbboard --scope user -- "<path>".
• 3. Configure database connections in the desktop app.
• 4. Use Claude to list tables, describe schemas, and run read queries.
• 5. Verify that write attempts are rejected by the parser or the database read‑only transaction.

Доказательства

dbboard is an open-source desktop database client with an MCP server that gives Claude Code read-only access to Postgres, MySQL, Turso / libSQL, Cloudflare D1, MongoDB and Firestore — enforced by the database, not by a keyword filter.

Источник

Passwords never reach the agent. They stay in the OS keychain.

Источник

run_read_query DELETE FROM orders WHERE quantity = 1 → query failed: not a single read-only statement: only read-only SELECT / WITH / EXPLAIN statements are allowed

Источник

Postgres refuses it, because the transaction itself is read-only.

Источник