Every "connect your AI agent to a database" tutorial ends the same
way: paste a connection string into a config file. That string now lives on a laptop, in shell history, maybe in a Slack DM to unblock someone on a Friday.
We didn't want that for our own team, so we built db-mcp-gateway a
self-hosted MCP server that sits between agents and databases. The
agent never holds a credential. It authenticates via SSO, the gateway
maps that identity to a YAML-defined grant, and the query runs under
least privilege with a row cap and a statement timeout.
What I want to cover in this post:
Full writeup + a real docker pull
you can run in five minutes:
https://github.com/developerz-ai/db-mcp-gateway Tags: #mcp #ai #security #postgresql
source & further reading
dev.to — original article
AI Can Migrate Your COBOL to Java. It Can't Prove It Didn't Break Anything. We Built the Part That Does.
How I made a Rust hot path 27x faster, and the AI fix I refused to merge
GPT-5.6 Goes GA: Programmatic Tool Calling Changes Everything