Governance

Data Console

Search, read and edit any table in the public schema. There is no SQL box, on purpose. You name a table and a search string; the statement is built server-side with quoted identifiers and your text passed as a parameter. A free-text SQL field on an admin page is one stolen session away from a full export, and no amount of care at the keyboard makes that safe.

Credential and identity columns — PIN hashes and salts, passwords, tokens, home addresses, identity blobs — are never selected and never writable. They are matched by name pattern rather than a maintained list, because a list is the thing somebody forgets to update when they add a column. Every edit is written through mcp_audit, which keeps the audit hash chain intact.