I Gave an AI Agent Access to a Production Database. Here's What Actually Happened.

Subtitle: A real account of using Model Context Protocol in production — the architecture, the failures, and what I'd do differently. The Setup Last year I was working on a system that needed to do so