Most agents get one god-mode DB connection, valv gives every user their own. A customer asks your support agent "where's my order?" With a raw connection, that query could read every other customer's rows too. With valv, you set programmatic per-user permissions once, every query is validated and scoped to the caller, and no raw SQL ever hits your DB. Ships as an MCP server or a TypeScript library.