logoalt Hacker News

gregoriolyesterday at 1:46 PM3 repliesview on HN

Why in the hell would it be able to access a _remote_ database?! In no acceptable dev environment would someone be able to access that.


Replies

heartbreakyesterday at 2:30 PM

Everywhere I’ve ever worked, there was always some way to access a production system even if it required multiple approvals and short-lived credentials for something like AWS SSM. If the user has access, the agent has access, no matter how briefly.

show 1 reply
prodigycorpyesterday at 2:29 PM

Supabase virtually encouraged it last year haha. I tried using it once and noped out after using it for an hour, when claude tried to do a bunch of migrations on prod instead of dev.

https://web.archive.org/web/20250622161053/https://supabase....

Now, there are some actual warnings. https://supabase.com/docs/guides/getting-started/mcp#securit...

kaydubyesterday at 3:30 PM

I think LLMs are exposing how slapdash many people work when building software.