Optional ReadonlyauditReadonlyauthReadonlyconnectorsAll SQL connections the server can reach (with credentials).
Optional ReadonlydynamicReadonlyengineEngine settings shared by all requests (model, policy, pruner, llm).
Optional ReadonlymaxMax request body bytes. Default 64 KB.
Optional ReadonlymongoMongoDB connections. Separate because Mongo is not a SQL Connector.
Optional ReadonlyonCalled for every error the server turns into a response, so a host can log it; the wire response never carries internal detail. Best-effort: a throw from the hook is swallowed.
Optional ReadonlyrequireReject any request whose Host is not loopback. The CLI sets this for a loopback bind, where a non-loopback Host is a DNS-rebinding attempt; a hosted deployment leaves it off and uses CORS.
Optional ReadonlysuggestOn a database error, ask the model for a corrected query and return it as suggestedSql
for the user to review and re-run. Costs one extra model call per failure. Default: true.
Identity + scope resolver. Required - there is no anonymous default.