Giving an AI agent a database today means one of three bad options: the archived official Postgres server, a vendor server that locks you to their hosted database, or a hand-rolled one where read-only enforcement, secret handling, and audit logging are left as an exercise.
mcpolyglot is one config and one CLI that turns Postgres, MySQL, SQLite, MongoDB, and any OpenAPI service into MCP servers. Every query is parsed and checked against a per-table policy before it reaches the database. Connections are read-only at the database level unless the policy grants writes. Sensitive values are redacted and results are marked as untrusted data. Every call is audited with the agent identified by its own token.
Each of those claims has a test, and the security document maps every claim to the file that proves it. Published on npm as @mcpolyglot/cli, currently in alpha.