At MCP Dev Summit Mumbai by
@AgenticAIFdn and
@linuxfoundation,
@Anushka__Saxena and I presented a session on Rethinking Agent–Database Access using MCP Toolbox.
A lot of agents get database access the dangerous way: a connection string and execute_sql. One prompt injection and your agent is exfiltrating every customer's orders.
So we showcased a production-grade e-commerce agent that can't. The key is MCP Toolbox for Databases:
@GoogleOSS open-source layer that sits between the agent and your database as a security control plane. The agent never sees a credential. Never writes raw SQL. It only calls narrow, typed tools
Tech Stack:
@PostgreSQL @MongoDB for Database,
@Kimi_Moonshot K2.6 from
@nebiustf for LLM Agent, Keycloak for OIDC, Runs locally on
@Docker , deploys to GKE with Workload Identity
Demo 👇