[hu3]

I made a small mcp script for database with 3 tools:

- listTables

- getTableSchema

- executeQuery (blocks destructive queries like anything containing DROP, DELETE, etc..)

I wouldn't trust a textual instructions to prevent LLMs from dropping a table.

[SatvikBeri]

That's why I give the LLM a readonly connection

[wahnfrieden]

This is much better than MCP, which also stuffs every session's precious context with potentially irrelevant instructions.

[kristo]

They could just make mcps dynamically loaded in the same way no?

[wahnfrieden]

It is still worse as it consumes more context giving instructions for custom tooling whereas the LLM already understands how to connect to and query a read-only SQL service with standard tools