A company wants several MCP-compatible assistants to call the same approved database tools. Which architecture minimizes custom per-assistant integrations?

1. Send database passwords to every assistant's chat history
2. Store tool definitions only in a vector index
3. Expose registered Select AI Agent tools through the managed Autonomous AI Database MCP Server
4. Build a separate public SQL proxy with unrestricted privileges for each client