How to securely connect MCP to the database (using Oracle DB 26AI and SQLcl) ?

What should we do to be sure of what AI can do using the SQLcl MCP server and what data is accessible to it? Are there any extra security precautions we could take in case AI go crazy? That's exactly