MCP governance

Govern tool-calling through the database.

MC2DB makes MCP tools, prompts, context packages, and model execution subject to database roles, privileges, row policies, audit trails, and operational controls.

grant execute on mcp.tool_create_ticket to support_agent; revoke execute on mcp.tool_refund_customer from support_agent; select * from mcp.audit_log order by called_at desc;

Tool permissions

Expose only the MCP tools an agent or user role is allowed to call, with database-enforced compartment and row filters.

Prompt and context controls

Constrain which memories, templates, sources, and model providers can be assembled for each workflow.

Database audit

Record the caller, role, tool, prompt, memory context, and result for compliance and incident review.

MC2DB moves MCP governance out of ad hoc middleware and into the same database authority that already protects the enterprise data.