valv

Most agents get one god-mode DB connection, valv gives every user their own. A customer asks your support agent where's my order? With a raw connection, that query could read every other customer's rows too. With valv, you set programmatic per-user permissions once, every query is validated and scoped to the caller, and no raw SQL ever hits your DB. Ships as an MCP server or a TypeScript library.