ClientSQL

Client SQL helps teams control who and what can access PostgreSQL. Give people access to specific tables and actions, then give Codex, Claude Code, or Cursor a narrower client scope without exposing the base database credential. Before a write runs, reviewers can see the exact SQL, expected row impact, and recovery limits. Migration changes include the pull request, generated SQL, rollback SQL, exact commit, and plan before Liquibase executes them. Every governed action leaves an audit record, and teams can revoke one client without disabling the rest.