Read-only on the SQL tree, not on the first keyword
A read-only MCP server has to decide on the query's syntax tree, never on its first keyword. Six defects of the prefix filter, two of them found on our own guard.
AKKO
Ce que nous apprenons en construisant AKKO.
Retours d'ingénierie, choix d'architecture et pédagogie sur la gouvernance des données et de l'IA. Des articles signés, datés, sourcés. Rien sans fait vérifiable.
S'abonner au flux RSS ↗Your AI agents see exactly what the user is allowed to see
We are releasing akko-mcp-trino, an MCP server that carries the user's identity all the way to Trino. Why, how it works, and what three proofs taught us.
AKKO