Connect a SQLite database. The agent only ever reads from it — every generated query is guarded, opened read-only, and gated by an authorizer, so a question can never mutate your data. Its schema is what goes in the prompt.
Connected database
—
Upload a database
Drag & drop a file here, or browse
.db · .sqlite · .sqlite3 — a copy is stored server-side
…or import a server-side path
The file is copied into this app's managed directory and opened read-only — the original is never touched.
Schema
No database selected — pick, upload, or import one above.
Settings are locked
Enter the settings password to view or change the model, credentials & execution policy.
Configuration
Stored server-side in SQLite (app_config.db) — never in the browser.
Model & connection
anthropic.* models get fully-streamed answers; other families (e.g. qwen.*) use the OpenAI-compatible endpoint.
SQL execution policy
The browser can tighten these but never exceed the server's hard ceilings — every query is truncated at the row cap and aborted at the timeout no matter what.