{"id":"sql-check","title":"SQL guard: single statement, read-only, table allowlist","description":"Checks one SQL string (up to 20000 characters; PostgreSQL, MySQL, SQLite or generic) before an agent executes it: exactly one statement, read-only (SELECT/VALUES/SHOW/EXPLAIN without side effects), and every table it reads or writes on a caller allowlist. Tokenizer-level: comments, string literals, quoted identifiers and dollar quoting cannot hide a second statement; reports statement kind, referenced tables after FROM/JOIN/INTO/UPDATE, SELECT INTO, locking reads, writable CTEs and known side-effect functions. Returns unsupported for constructs it cannot classify and for any transpile request; it is not a full SQL parser and does not prove a query safe (a user-defined function may write).","roi":"Stops an injected second statement or an unexpected table reaching the database from an agent's generated SQL.","audience":"developer","package":"code-preflight-kit","channels":["x402","mcp"],"endpoint":{"method":"POST","url":"https://agents.writerslogic.com/api/v1/sql-check","path":"/api/v1/sql-check","contentType":"application/json"},"price":{"amount":"0.005","currency":"USDC","network":"base","perCall":true,"failedCallsCharged":false},"inputSchema":{"type":"object","additionalProperties":false,"required":["sql"],"properties":{"sql":{"type":"string","maxLength":20000},"dialect":{"type":"string","enum":["postgres","mysql","sqlite","ansi"],"description":"Lexical rules; default ansi."},"readOnly":{"type":"boolean","description":"Default true: anything but a plain read fails."},"allowedTables":{"type":"array","maxItems":200,"items":{"type":"string","maxLength":200},"description":"Allowed tables, lower-cased match: 'users', 'public.users' or 'public.*'. Unqualified and qualified names are different entries."},"transpileTo":{"type":"string","enum":["postgres","mysql","sqlite","bigquery","snowflake","tsql"],"description":"Always answered unsupported."}}},"resultSchema":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"dialect":{"type":"string"},"readOnly":{"type":"boolean"},"statementCount":{"type":"integer"},"statements":{"type":"array","items":{"type":"object","properties":{"index":{"type":"integer"},"kind":{"type":"string"},"readOnly":{"type":"boolean"},"tables":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"role":{"type":"string","enum":["read","write","ddl"]},"at":{"type":"integer"}}}},"ctes":{"type":"array","items":{"type":"string"}},"functions":{"type":"array","items":{"type":"string"}},"hazards":{"type":"array","items":{"type":"object","properties":{"rule":{"type":"string"},"detail":{"type":"string"},"at":{"type":"integer"}}}},"unsupported":{"type":"string"}}}},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"outputSchema":{"type":"object","properties":{"data":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"dialect":{"type":"string"},"readOnly":{"type":"boolean"},"statementCount":{"type":"integer"},"statements":{"type":"array","items":{"type":"object","properties":{"index":{"type":"integer"},"kind":{"type":"string"},"readOnly":{"type":"boolean"},"tables":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"role":{"type":"string","enum":["read","write","ddl"]},"at":{"type":"integer"}}}},"ctes":{"type":"array","items":{"type":"string"}},"functions":{"type":"array","items":{"type":"string"}},"hazards":{"type":"array","items":{"type":"object","properties":{"rule":{"type":"string"},"detail":{"type":"string"},"at":{"type":"integer"}}}},"unsupported":{"type":"string"}}}},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"_provenance":{"type":"object","description":"C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance"}},"required":["data","_provenance"]},"example":{"sql":"SELECT u.id, o.total FROM users u JOIN orders o ON o.user_id = u.id WHERE u.id = $1","dialect":"postgres","allowedTables":["users","orders"]},"openapiOperation":{"operationId":"sql_check","summary":"SQL guard: single statement, read-only, table allowlist","description":"Checks one SQL string (up to 20000 characters; PostgreSQL, MySQL, SQLite or generic) before an agent executes it: exactly one statement, read-only (SELECT/VALUES/SHOW/EXPLAIN without side effects), and every table it reads or writes on a caller allowlist. Tokenizer-level: comments, string literals, quoted identifiers and dollar quoting cannot hide a second statement; reports statement kind, referenced tables after FROM/JOIN/INTO/UPDATE, SELECT INTO, locking reads, writable CTEs and known side-effect functions. Returns unsupported for constructs it cannot classify and for any transpile request; it is not a full SQL parser and does not prove a query safe (a user-defined function may write).\n\nPrice: 0.005 USDC on Base (x402).","x-x402-price-usdc":"0.005","x-x402-amount":"5000","x-payment-info":{"protocols":["x402"],"price":{"mode":"fixed","currency":"USD","amount":"0.005"}},"x-audience":"developer","x-sample-url":"https://agents.writerslogic.com/api/v1/samples/sql-check","security":[{"x402":[]},{"apiKey":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["sql"],"properties":{"sql":{"type":"string","maxLength":20000},"dialect":{"type":"string","enum":["postgres","mysql","sqlite","ansi"],"description":"Lexical rules; default ansi."},"readOnly":{"type":"boolean","description":"Default true: anything but a plain read fails."},"allowedTables":{"type":"array","maxItems":200,"items":{"type":"string","maxLength":200},"description":"Allowed tables, lower-cased match: 'users', 'public.users' or 'public.*'. Unqualified and qualified names are different entries."},"transpileTo":{"type":"string","enum":["postgres","mysql","sqlite","bigquery","snowflake","tsql"],"description":"Always answered unsupported."}}},"example":{"sql":"SELECT u.id, o.total FROM users u JOIN orders o ON o.user_id = u.id WHERE u.id = $1","dialect":"postgres","allowedTables":["users","orders"]}}}},"responses":{"200":{"description":"Paid result with provenance","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"type":"object","properties":{"status":{"type":"string","enum":["pass","fail","unknown","unsupported"],"description":"pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass."},"dialect":{"type":"string"},"readOnly":{"type":"boolean"},"statementCount":{"type":"integer"},"statements":{"type":"array","items":{"type":"object","properties":{"index":{"type":"integer"},"kind":{"type":"string"},"readOnly":{"type":"boolean"},"tables":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"role":{"type":"string","enum":["read","write","ddl"]},"at":{"type":"integer"}}}},"ctes":{"type":"array","items":{"type":"string"}},"functions":{"type":"array","items":{"type":"string"}},"hazards":{"type":"array","items":{"type":"object","properties":{"rule":{"type":"string"},"detail":{"type":"string"},"at":{"type":"integer"}}}},"unsupported":{"type":"string"}}}},"witnesses":{"type":"array","items":{"type":"object","properties":{"ruleId":{"type":"string"},"detail":{"type":"string"},"path":{"type":"string","description":"JSON pointer or dotted path into the input."},"offset":{"type":"integer"},"index":{"type":"integer"},"expected":{"description":"What the rule required."},"actual":{"description":"What the input had."}}}},"versions":{"type":"object","description":"Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile)."},"limits":{"type":"array","items":{"type":"string"}},"deterministic":{"type":"boolean","description":"Always true: pure code, no model."}}},"_provenance":{"type":"object","description":"C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance"}},"required":["data","_provenance"]}}}},"400":{"description":"Invalid request (no payment consumed)","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}},"401":{"description":"Invalid X-API-KEY","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}},"402":{"description":"Payment required or invalid","content":{"application/json":{"schema":{"type":"object","description":"x402 v2 PaymentRequired (also base64 in the PAYMENT-REQUIRED header)","properties":{"x402Version":{"type":"integer"},"error":{"type":"string"},"code":{"type":"string"},"resource":{"type":"object"},"accepts":{"type":"array","items":{"type":"object"}},"extensions":{"type":"object"}}}}}},"502":{"description":"Upstream failure; the payment is released or not settled","content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string"},"code":{"type":"string"}}}}}}}},"links":{"docs":"https://agents.writerslogic.com/docs/sql-check/","docsJson":"https://agents.writerslogic.com/docs/sql-check.json","sample":"https://agents.writerslogic.com/api/v1/samples/sql-check","openapi":"https://agents.writerslogic.com/openapi.json","catalog":"https://agents.writerslogic.com/api/v1/catalog","verifyProvenance":"https://agents.writerslogic.com/api/v1/verify-provenance","index":"https://agents.writerslogic.com/docs/index.json"}}