Connector · Connectors

Postgres and MySQL

Point the assistant at your own Postgres or MySQL database. Reads run, anything else asks.

what it can do
Reads and writes
read tools · write tools
1 · 1
writes ask you first
All

What the assistant can do

1 read · 1 write
  • run_sql_queryReadsselect, with, show, explain, describe, values or table. Sent as exactly one statement in a read only transaction.
  • run_sql_queryAsks firstEverything else, plus multiple statements, a CTE hiding an insert or delete, and select into. Stops and asks.

What you hand over

  • host and portWhere the database listens.
  • databaseWhich database to open.
  • username and passwordSealed, and only decrypted for one call.
  • TLSOptional settings if your server needs them.

A read cannot smuggle in a write even if it was misjudged: Postgres itself refuses a second statement, and on MySQL the driver does.

When it asks you

Statements such as drop, truncate or grant are marked dangerous and can only ever be approved one at a time. An allow list entry covers one chat and one connector.

How to connect

  1. 1

    Open + in the composer, then Connectors, and choose Add database.

  2. 2

    Fill in the details listed above. Credentials are sealed and only decrypted for the length of one call.

  3. 3

    The assistant gets run_sql_query. New connectors are read only by default.

Connectors in the documentation(opens in a new tab)

Connect a service from the chat sidebar.

Switch it on in a thread and approve each write as it comes up. Disconnecting removes the access immediately.