Enables LLM agents to query databases with read-only access, while requiring human approval for writes through a token-based confirmation system.
