Why avoid direct database access?
Practice this question- A generated query can read too much, mutate data, or consume excessive resources.
- I expose narrow schema-defined business tools with authorization, parameterized queries, field projection, and limits instead of broad database credentials.
Adapted from 13_AI.MD · “29.13 AI security”. Code examples are study fragments. Difficulty and core labels are editorial estimates; version-specific behavior should be checked against your project.