Skip to main content
Isthmus exposes three MCP tools that AI models call to explore and query your PostgreSQL database. You don’t call these tools directly — your AI client (Claude, Cursor, etc.) invokes them automatically based on your questions. When an AI model connects to your database for the first time, the most effective sequence is:
Most AI models follow this pattern naturally — they start broad with discover, narrow down to specific tables with describe_table, then write and execute SQL with query.

Tool summary

Safety guardrails

All tools operate within Isthmus’s safety model:
  • Read-only transactions — queries cannot modify data
  • SQL validation — only SELECT and EXPLAIN statements are allowed (enforced via PostgreSQL AST parsing)
  • Row limits — configurable max rows per query (default: 100)
  • Query timeout — configurable timeout (default: 10s)
  • Schema filtering — only expose the schemas you choose
See Security for the full safety model.