mcp

Read-only by default: how mcp-multi-db enforces it

A walk through the two layers that make an MCP server safe to point at a real database — a SQL-text guard that is allowed to be imperfect, and a connection that cannot write.