Lend an agent the query.
Never the credentials.

Soquel is a desktop database client for Postgres, MySQL, SQLite, Redis and MongoDB. It can also hand a coding agent a way in, one connection at a time, while the passwords stay in the Rust core and the OS keychain.

An agent wants to write

This changes data on prod billing. It runs only if you allow it.

UPDATE invoices
SET status = 'void'
WHERE customer_id = 4812
  AND status = 'draft'

Deny

Allow for 15 min Run this write

Denying it, closing it, or ignoring it for a minute all refuse.

Agent access

An agent gets the tools, not a copy of your database password.

Soquel runs a local MCP server. Point your agent at the app instead of pasting a connection string into its config, and the guardrails come with it.

Read-only is the engine's job, not a SQL parser's.

Agent reads run inside a READ ONLY transaction on Postgres and MySQL, or on a handle opened read-only at the filesystem level on SQLite. A statement that slips past classification still cannot write.

Off, and empty, by default.

The server starts stopped, and every connection stays invisible to agents until you opt it in. Read-only or writes-need-approval, one connection at a time.

Every call is logged.

Tool, connection, statement, outcome and duration, readable from the app.

Local only.

The server binds loopback and requires a bearer token that never leaves your machine. Results are capped and paginated, and agent queries carry a 30 second engine-enforced timeout.

Any client that speaks MCP over streamable HTTP works, with the same URL and token. Claude Code takes it as one line:

claude mcp add --transport http soquel http://127.0.0.1:52700/mcp \
  --header "Authorization: Bearer <token>"

The client

It has to be a good client first.

Table browser with inline editing, filters and export
SQL editor with query plans, rendered as a tree
SSH tunnels with key, agent or password auth, and host key verification
TLS, custom root certificates included
Passwords from the OS keychain, asked at connect, or read from a command
Connections exported to a file, passwords left out unless you encrypt them in

Engines

PostgreSQL: 14 and up
MySQL, MariaDB: MySQL 8.0 and up, MariaDB LTS
SQLite: a file, no server
Redis, Valkey: key browser and console
MongoDB: document browser and console

Get it

No builds yet.

Soquel is pre-release and under active development. The source is available under FSL-1.1-MIT: read it, build it for yourself, or watch the repository for the first signed builds.

Read the source

Lend an agent the query.Never the credentials.