Databend MCP enforces production read-only with allowlisted sandbox actions so AI can validate ETL safely while blocking production writes, updates, and deletes.