Data & AI · wired today
Drive PlanetScale with governed agents
Models and datasets are infrastructure now, and agents need eyes on them. The PlanetScale connector is one of 205 executable connectors and gives agents 4 read-only tools, with the credential held in the vault and every call receipted.
What agents can run against PlanetScale
| Tool | What it does |
|---|---|
list_organizations | List the PlanetScale organizations the service token can see (name, plan, how many databases), which supplies the organization slug every other tool takes |
list_databases | List the databases in one PlanetScale organization (name, state, region, default branch, plan, branch counts), optionally narrowed by a name search |
get_database | Get one PlanetScale database by organization and database slug (state, region, default branch, sharding, deploy and deletion protection settings) |
list_branches | List the branches of one PlanetScale database (name, state, production flag, safe migrations, parent branch, region), optionally filtered by production status or ordered by creation time |
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the PlanetScale connector needs
You provide service token ID, service token, organization from your PlanetScale account; Quox sends it as an API key sent as a header. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: PlanetScale's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
This connector was blind shape-proven against the real PlanetScale API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.
PlanetScale integration FAQ
What can Quox agents do with PlanetScale?
Agents can run 4 read-only tools against PlanetScale: list organizations, list databases, get database, list branches. Every call is receipted in the evidence trail.
What does the PlanetScale integration need?
You provide service token ID, service token, organization from your PlanetScale account; Quox sends it as an API key sent as a header. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my PlanetScale credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the PlanetScale connector?
This connector was blind shape-proven against the real PlanetScale API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.