SQLGuard FAQs

Question 1

What kind of destructive queries does SQLGuard prevent?

Accepted Answer

SQLGuard automatically blocks destructive queries like `DELETE`, `DROP`, `TRUNCATE`, or `ALTER` if they lack a `WHERE` clause, preventing accidental data loss or schema changes across entire tables. It also provides impact estimation and `EXPLAIN` analysis for all mutations.

Question 2

How does human confirmation work for database operations?

Accepted Answer

For all WRITE or DESTRUCTIVE queries, SQLGuard returns an impact analysis (estimated rows affected, EXPLAIN output) to the AI agent. The agent then prompts you for explicit confirmation, which you provide by calling the query tool with `confirmed: true`.

Question 3

What is SQLGuard and how does it protect my database?

Accepted Answer

SQLGuard is a critical safety layer that sits between AI agents and your database. It intercepts, validates, and classifies all SQL queries (READ, WRITE, DESTRUCTIVE) to prevent unintended modifications, ensuring data integrity by requiring human confirmation for sensitive operations.

Question 4

Which AI agents and databases are compatible with SQLGuard?

Accepted Answer

SQLGuard is designed to work with AI agents that use an MCP client config, such as Claude Code and Cursor. It supports PostgreSQL and SQLite databases, configurable via connection strings or file paths.

Question 5

What advanced features does SQLGuard Pro offer?

Accepted Answer

SQLGuard Pro enhances control with an audit log of every query, custom rules via YAML (e.g., block specific tables, cap max rows), support for multiple database connections, and a dry-run mode to preview query effects without execution.

SQLGuard

SQLGuard

Key Features

Use Cases

Key Features

Use Cases