A SQL MCP endpoint is connected to a development assistant. What access design is appropriate?

1. Scope endpoint operations and database permissions to the approved development task
2. Put the database administrator password in a public prompt
3. Treat tool discovery as permission to drop every database
4. Assume an assistant's generated explanation replaces authorization