How do I avoid handing raw warehouse credentials to an AI tool?
The MCP server holds the connection. The agent talks to Bruin, not the warehouse directly, so credentials never live in the agent.
Command
bruin mcpDefined in
MCP + YAML
Works with
Any MCP client + Bruin
What you get
Governancelineage contextself-hostedreviewable access
How it works in code
$ bruin mcp # exposes governed assets over MCPRun bruin mcp and the agent works against governed assets, not the raw warehouse.
Related use cases
Governed agent access
Expose only governed assets to an AI agent
How do I stop an AI agent from touching raw or sensitive tables?
Governed agent accessLet an agent use your data quality checks
Can an AI agent know whether the data it is using is trustworthy?
Governed agent accessGive an agent lineage context for better answers
How do I help an AI agent understand how tables relate?
Give agents governed data
Open source. Expose assets, quality, and lineage to AI agents over MCP.