// SCAN REPORT

ThinAir Data

23 tools. 5 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 3 Jul 2026

5 can modify or destroy data

18 read-only

23 tools total

Community server · catalogue entry verified 03/07/2026

How to control ThinAir Data ↓

TOOL MAP

What ThinAir Data exposes to your agents

Read (18) Write / Execute (4) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous ThinAir Data tools

Destructive · Medium saved_queries This tool spans multiple categories. Execute · High generate_migration This tool generates and likely executes ALTER TABLE migration SQL statements against a live database connection. Execute · High cross_db_query Although the tool returns a result set (suggesting a read-like outcome), it actively *executes* queries across multiple database connections and dialects. Write · Low generate_seed_data This tool generates SQL INSERT statements for development/testing purposes without executing them.

5 of ThinAir Data's 23 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control ThinAir Data

PolicyLayer is an MCP gateway — it sits between your AI agents and ThinAir Data, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "saved_queries": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "generate_seed_data": {
    "limits": [
      {
        "counter": "generate_seed_data_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "analyze_table": {
    "limits": [
      {
        "counter": "analyze_table_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register ThinAir Data — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON THINAIR DATA →

Instant setup, no code required.

FULL CATALOGUE

All 23 ThinAir Data tools

DESTRUCTIVE 1 tools

Destructive saved_queries Manage your personal library of reusable SELECT queries. action=save stores a query by name; action=run execut

EXECUTE 2 tools

Execute cross_db_query Run a federated query across multiple connections (different dialects). Returns a unified result set with per- Execute generate_migration Generate dialect-correct ALTER TABLE migration SQL + rollback from a plain-English intent. Output uses the con

WRITE 2 tools

Write generate_seed_data Generate realistic, schema-aware INSERT statements for development and testing. Respects types, constraints, a Write issue_api_key Issue a fresh ta_data_ API key for your current tenant. Useful for pasting into /add-database or configuring a

READ 18 tools

Read analyze_table QUICK statistical snapshot for ONE table — row count, null rates, cardinality, numeric min/max/avg, date range Read data_profile FULL data quality + compliance report for a table: per-column stats PLUS a 0-100 health score, type-gated PII Read describe_schema Discover the full database schema: tables, columns, types, primary keys, foreign keys, and indexes. Results ca Read detect_anomalies Scan a table for unusual patterns: volume drops/spikes, data gaps, value concentration, high null rates, stale Read explain_query Analyze a SQL query Read find_n_plus_one Detect N+1 query patterns from recent query history. Fingerprints queries and flags repeated patterns. [ARCHIT Read impact_analysis Analyze the blast radius of a proposed schema change: FK dependencies, affected views, row count, risk score. Read list_connections List every database connection registered for your tenant: name, id, dbType (postgres / mysql / mssql), create Read optimize_query Suggest a rewritten, optimized version of a SQL query with explanations. Identifies sequential scans, missing Read pii_scan Sweep string columns across tables for common PII patterns (email, SSN, credit card, phone, JWT, bearer tokens Read query_firewall Manage per-connection SQL rules: block dangerous patterns, require WHERE on large tables, log PII access. [ARC Read query_history Return recent queries executed through ThinAir with timing, row counts, and status. [BUILD tier] Read query_sql Execute a read-only SQL query against the target connection. ONLY SELECT / WITH / EXPLAIN permitted. Write dia Read quota Check current API usage, daily limit, plan name, and upgrade options. Read show_locks List active sessions + blocking locks. Uses the dialect Read suggest_queries Generate schema-aware query suggestions with ready-to-run SQL. Great for exploring unfamiliar databases or fin Read test_connection Ping a connection (SELECT 1) and return server version + latency. Fast way to confirm credentials and network Read watch_table Monitor a table

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about ThinAir Data

Can an AI agent delete data through the ThinAir Data MCP server? +

Yes. The ThinAir Data server exposes 1 destructive tools including saved_queries. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ThinAir Data? +

The ThinAir Data server has 2 write tools including generate_seed_data, issue_api_key. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ThinAir Data.

How many tools does the ThinAir Data MCP server expose? +

23 tools across 4 categories: Destructive, Execute, Read, Write. 18 are read-only. 5 can modify, create, or delete data.

How do I enforce a policy on ThinAir Data? +

Register the ThinAir Data MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every ThinAir Data tool call.

Deterministic rules across all 23 ThinAir Data tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON THINAIR DATA →

Instant setup, no code required.

23 ThinAir Data tools catalogued and risk-classified — across an index of 43,000+ MCP servers.