I made a small mcp script for database with 3 tools:

- listTables

- getTableSchema

- executeQuery (blocks destructive queries like anything containing DROP, DELETE, etc..)

I wouldn't trust a textual instructions to prevent LLMs from dropping a table.

That's why I give the LLM a readonly connection

This is much better than MCP, which also stuffs every session's precious context with potentially irrelevant instructions.

They could just make mcps dynamically loaded in the same way no?

	▲	wahnfrieden a day ago \| parent [-]
		It is still worse as it consumes more context giving instructions for custom tooling whereas the LLM already understands how to connect to and query a read-only SQL service with standard tools