Most database MCP servers hand your AI agent execute_sql â full read/write authority, one prompt injection away from disaster. Synapsor Runner replaces that with reviewed business actions: tenant-scoped semantic tools like billing.propose_late_fee_waiver. Writes become proposals a human approves outside the model's reach, then apply with guards, receipts, and replay. Run npx @synapsor/runner audit to score your current MCP setup's risk in 60 seconds. Local-first, Apache-2.0, no account needed.
