An external MCP-compatible assistant needs controlled access to approved Autonomous database tools. Which design is appropriate?

1. Publish ADMIN credentials in the assistant's initial prompt
2. Register authorized Select AI Agent tools through the managed MCP Server with appropriate caller privileges
3. Assume MCP support makes every schema public automatically
4. Expose arbitrary SQL execution to anonymous callers