After an AI Agent Nearly Leaked Another Tenant's Revenue, Dev Open-Sources Canonic MCP Server
canonic-app · reddit · 2026-09-06
A developer found their multi-tenant analytics LLM agent generated technically valid SQL that joined across tenant boundaries — no prompt injection needed. Semantic layers like dbt describe metrics but don't enforce mandatory filters or tenant scoping.
They built canonic, an open-source context layer between agent and warehouse that compiles business rules (mandatory filters, required dimensions, tenant/role scoping) directly into every query, and returns answers with a trust score explaining why they should be believed. Ships as an MCP server for Claude Code, Cursor and others; ingests dbt/LookML or raw schemas.
More from coding & agent
- Playable open-source 4D chess, built with GPT-6 Astra and free to play now — JeremyNguyenPhD · 2026-09-06
- Prompt 7 of 7: Have Claude assemble a complete brand playbook document — ahuja_priyank · 2026-09-06
- Prompt 6 of 7: Stress-test your brand identity across five real scenarios — ahuja_priyank · 2026-09-06
- Prompt 5 of 7: List the brand templates you actually need in month one — ahuja_priyank · 2026-09-06
- Prompt 4 of 7: Generate four logo directions with a studio-grade brief — ahuja_priyank · 2026-09-06
- Prompt 3 of 7: Write a brand voice style guide with on/off-voice demos — ahuja_priyank · 2026-09-06