Database Connector

Release notes

Database Connector 1.1.0 supports MySQL 8.4.5, PostgreSQL 17, SQL Server 2022, Oracle 19 / Oracle Free 26ai (server major 23), and MongoDB 8. Six tools include query_documents. The production backend and website are deployed; the active review draft is Configured with six tools and no MCP scan findings. No submission, approval or publication is claimed here. Real native login, browser setup and ChatGPT Work tests against the same deployed endpoint returned 8 messages and 3 suppliers on each of five engines, sequentially under Free one-connection limits. Oracle Free 26ai was qualified locally; AWS/ChatGPT used Oracle 19. A removed connection ID was denied by an actual tool call. A fresh unsigned install showed a generic expired-connection/Reconnect message; no setup widget was observed on that unsigned turn. The supplied verified reviewer account now has Review MySQL and Review MongoDB preconfigured with synthetic data. Approved retention lasts until November 8, 2026 at 20:00 UTC. Genuine Stripe TEST Pro was activated without live charges or manual entitlements; reviewers need no signup, database setup or payment. Credentials are supplied privately in the review form, never in this ZIP. All five listed positive and three negative cases passed in a fresh ChatGPT conversation with both connections. Rejected schema-qualified SQL counts were disclosed and recovered with unqualified queries. SQL row caps, a returned identifier as a named parameter, NULL handling, MongoDB discovery/counts and max_rows=2 truncation without pipeline $limit passed. Data turns did not reopen setup. The $out, $lookup and password cases were model refusals, not backend negative invocations. The linked 84-second silent walkthrough uses selected actual browser screen captures, not continuous recording. It shows the five-engine results and predates the final simultaneous two-connection rerun. HTTP 200, exact MP4 hash and HTTP 206 range support were verified. All annotation justifications follow unchanged. get_started: readOnlyHint is true. Returns an OAuth sign-in challenge or reads authorized connection metadata to display the setup/management panel. The tool does not create accounts, save credentials, or remove connections. Panel buttons link to separate authenticated website flows; invoking this tool performs none of those mutations. openWorldHint is false because the tool reads only the authenticated account's bounded connector registry or returns fixed Nektron setup/sign-in links. Returning a link does not submit a form or contact a caller-selected external destination. destructiveHint is false because this tool performs retrieval only. It does not replace or delete lease records, customer records, connection settings, credentials, memberships, or subscriptions. idempotentHint is true because repeating this retrieval creates no additional application records, leases, or account changes. Returned metadata may reflect independently changed account state. list_connections: readOnlyHint is true. Reads authorized connection metadata and setup eligibility for the signed-in identity from the registry; it does not create a membership, save a connection, invoke database execution, acquire leases, or append execution audit records. openWorldHint is false because the tool reads only the authenticated account's bounded connector registry or returns fixed Nektron setup/sign-in links. Returning a link does not submit a form or contact a caller-selected external destination. destructiveHint is false because this tool performs retrieval only. It does not replace or delete lease records, customer records, connection settings, credentials, memberships, or subscriptions. idempotentHint is true because repeating this retrieval creates no additional application records, leases, or account changes. Returned metadata may reflect independently changed account state. list_tables: Lists permitted tables/views for relational engines or collections for MongoDB in a registered connection. readOnlyHint is false because each execution also appends connector audit records and acquires/releases a temporary concurrency lease; source database access remains read-only. destructiveHint is true because the internal concurrency-lease lifecycle can overwrite an expired lease slot and deletes the lease held by this execution. Cleanup is conditional on its holder identifier, so an old execution cannot delete a replacement lease. This annotation describes those internal replacement/deletion effects; the tool cannot update or delete customer database records, saved connections, credentials, memberships, or subscriptions. idempotentHint is false because each invocation, including a repeat with identical arguments, appends new audit records and acquires/releases a new concurrency lease. Repetition has additional connector-side effects even if returned rows are identical. openWorldHint is false because access is confined to the authenticated tenant and its pre-registered connection catalog with approved tables or collections. Tool inputs cannot choose a host, network address, secret ARN, tenant ID, or cross-database target. SQL and MongoDB pipeline policies restrict operators, functions and source scope. Remote hosting does not turn this bounded private catalog into an open-world operation. describe_tables: Reads available column/key metadata for up to ten permitted relational tables, or collection metadata for MongoDB. It does not infer a fixed MongoDB document schema. readOnlyHint is false because each execution also appends connector audit records and acquires/releases a temporary concurrency lease; source database access remains read-only. destructiveHint is true because the internal concurrency-lease lifecycle can overwrite an expired lease slot and deletes the lease held by this execution. Cleanup is conditional on its holder identifier, so an old execution cannot delete a replacement lease. This annotation describes those internal replacement/deletion effects; the tool cannot update or delete customer database records, saved connections, credentials, memberships, or subscriptions. idempotentHint is false because each invocation, including a repeat with identical arguments, appends new audit records and acquires/releases a new concurrency lease. Repetition has additional connector-side effects even if returned rows are identical. openWorldHint is false because access is confined to the authenticated tenant and its pre-registered connection catalog with approved tables or collections. Tool inputs cannot choose a host, network address, secret ARN, tenant ID, or cross-database target. SQL and MongoDB pipeline policies restrict operators, functions and source scope. Remote hosting does not turn this bounded private catalog into an open-world operation. query_readonly: Executes one policy-validated relational SELECT/UNION query with named scalar parameters through restricted read-only credentials and engine-specific query/session controls; it cannot execute MongoDB queries. readOnlyHint is false because each execution also appends connector audit records and acquires/releases a temporary concurrency lease; source database access remains read-only. destructiveHint is true because the internal concurrency-lease lifecycle can overwrite an expired lease slot and deletes the lease held by this execution. Cleanup is conditional on its holder identifier, so an old execution cannot delete a replacement lease. This annotation describes those internal replacement/deletion effects; the tool cannot update or delete customer database records, saved connections, credentials, memberships, or subscriptions. idempotentHint is false because each invocation, including a repeat with identical arguments, appends new audit records and acquires/releases a new concurrency lease. Repetition has additional connector-side effects even if returned rows are identical. openWorldHint is false because access is confined to the authenticated tenant and its pre-registered connection catalog with approved tables or collections. Tool inputs cannot choose a host, network address, secret ARN, tenant ID, or cross-database target. SQL and MongoDB pipeline policies restrict operators, functions and source scope. Remote hosting does not turn this bounded private catalog into an open-world operation. query_documents: Executes a policy-validated MongoDB aggregation pipeline against one permitted collection through restricted read credentials. JavaScript, lookup, out, merge, and database mutations are rejected. readOnlyHint is false because each execution also appends connector audit records and acquires/releases a temporary concurrency lease; source database access remains read-only. destructiveHint is true because the internal concurrency-lease lifecycle can overwrite an expired lease slot and deletes the lease held by this execution. Cleanup is conditional on its holder identifier, so an old execution cannot delete a replacement lease. This annotation describes those internal replacement/deletion effects; the tool cannot update or delete customer database records, saved connections, credentials, memberships, or subscriptions. idempotentHint is false because each invocation, including a repeat with identical arguments, appends new audit records and acquires/releases a new concurrency lease. Repetition has additional connector-side effects even if returned rows are identical. openWorldHint is false because access is confined to the authenticated tenant and its pre-registered connection catalog with approved tables or collections. Tool inputs cannot choose a host, network address, secret ARN, tenant ID, or cross-database target. SQL and MongoDB pipeline policies restrict operators, functions and source scope. Remote hosting does not turn this bounded private catalog into an open-world operation.

Declared in the saved package. Remote tools may change independently.