Loading video...

Video Failed to Load

Go Home

The most powerful SQLite database is a Cloudflare Developers Durable Object with row level security, query allowlist, data masking, REST API, web sockets + query caching. Today we're announcing Auth + RLS + Allowlist + Query Caching are available by default in StarbaseDB. Read more 🧵

20,431 views • 1 year ago •via X (Twitter)

7 Comments

Brayden Wilmoth's profile picture
Brayden Wilmoth1 year ago

StarbaseDB: Allowlist + RLS + Auth Example: Blog Post:

Brayden Wilmoth's profile picture
Brayden Wilmoth1 year ago

1. Query Caching Any request you make to your instance with the header "X-Starbase-Cache" in it will now automatically be cached for 60 seconds. Perfect for external data source use cases where connecting to Postgres, MySQL, Mongo or others and you want your data response cached on the edge. Early testing shows multi-second SQL requests going down to as little as ~50ms! Few caveats exist here including: - Response cached must be less than 1MiB (RPC restriction in Workers) - Query must not contain any modifying statements (SELECT only) - No dynamic parameters Many improvements to come here to improve all three of the above areas.

Brayden Wilmoth's profile picture
Brayden Wilmoth1 year ago

2. Allowlist You can now specify a specific list of queries that can be executed against your external data source to prevent users from trying to access data tables they shouldn't. This works when connecting StarbaseDB to other database viewers, or by hitting the endpoints your instance exposes. This feature is an essential piece to the puzzle for enabling executing SQL statements safely from the frontend and keeping security at the forefront.

Brayden Wilmoth's profile picture
Brayden Wilmoth1 year ago

3. Row Level Security A feature that is mostly touted as a core part of Postgres but always recommended to have a secondary layer in your application logic. Now as part of StarbaseDB it comes built in out of the box so you can define table policies that should exist. You can now query "SELECT * FROM todos;" and by design only get the todos that are relevant to the requesting user. When a policy exists on a table that indicates that RLS is turned "on" for that entire table. You can easily create rules for what operations can be performed. Again, another very important piece to the SQL from frontend goal. This feature is still in Early Access but want to give everyone the opportunity today to start working with it and providing feedback to us on how it should improve.

Brayden Wilmoth's profile picture
Brayden Wilmoth1 year ago

Lastly, all of this is still in EARLY ACCESS! More to come but we want to get this into peoples hands early and invite feedback. There will be quirks, limitations, and gotcha's I'm sure. The foundation has been set and now it is time for us to build & improve what we have. 🙏🚀

Sandrino Di Mattia's profile picture
Sandrino Di Mattia1 year ago

@CloudflareDev What are your thoughts on cost? Each time you query the DB it will count as 1 worker invocation, right?

Brayden Wilmoth's profile picture
Brayden Wilmoth1 year ago

@CloudflareDev 15,000,000 requests for $8 is a good problem to have in my books.

Related Videos

Your agents can't keep up with real-time data. Especially when it's scattered across dozens of sources. Most teams waste weeks building custom connectors for every database, API, and data warehouse. Then they build ETL pipelines to sync everything. By the time your agent retrieves the data, it's already outdated. Picture this: Your Postgres database updated 5 minutes ago. Your MongoDB collection changed 2 minutes ago. Your agent is still pulling from yesterday's snapshot. This is why most production RAG systems fail. There's a better approach: MindsDB is an open-source AI platform with a federated data engine that lets you query multiple data sources in real-time using SQL - without moving any data. Here's what makes it different: ↳ Your data stays in place. No ETL pipelines or data duplication ↳ Query Postgres, MongoDB, REST APIs, and more using consistent SQL ↳ JOIN across different sources in real-time with a unified interface ↳ Works with both structured and un-structured data And here's the best part: You don't even need to write SQL. Just describe what you want in plain English, and MindsDB converts it to SQL automatically. The system does all the heavy lifting. The breakthrough for AI agents is simple: When data updates at the source, your agent gets fresh results immediately. No sync delays. No stale embeddings. No custom code for each integration. You can literally write a SQL query that joins a Postgres table with a MongoDB collection and gets live results. This is what production AI applications need but rarely get. In this video, I give you a complete walkthrough of what we just discussed and how to actually do it. Make sure you watch this till the end. I've shared the link to MindsDB's GitHub repo in the next tweet!

Akshay 🚀

65,672 views • 8 months ago

Google open-sourced MCP Toolbox for Databases. I gave it access to everything else. For context, Google's MCP Toolbox for Databases is an open-source server that lets AI agents securely query structured databases like PostgreSQL and MySQL through the MCP protocol However, most enterprise knowledge doesn't actually live in databases. It's scattered across emails, Slack threads, GitHub repos, Salesforce records, customer reviews, and internal docs. So Agents can't see any of it, which means they're working with a fraction of the context they need. I fixed that using MindsDB. It acts as a universal SQL layer that sits on top of all your data sources: structured, semi-structured, and unstructured. This means you can query Salesforce, Gmail, GitHub, S3 files, Jira, and 200+ more sources using SQL syntax. The clever part is how it connects to the MCP Toolbox. MindsDB exposes everything through MySQL, so from the Agent's perspective, it's just running SQL and getting context back. It doesn't know or care that the data came from five different sources behind the scenes. This setup unlocks some powerful capabilities: → One SQL interface for dozens of enterprise sources → Cross-datasource joins (combine GitHub and CRM data in a single query) → Built-in ML capabilities for working with unstructured data → Simple MCP tools that now have massively expanded reach In the video below, the Agent queries GitHub data and a customer review database in one SQL query. So what used to require ETL pipelines and weeks of engineering effort now happens instantly. At the end of the day, AI agents are only as useful as the data they can access. This gives them a lot more to work with. I have shared the GitHub repo in the replies, where you can find more details about this.

Akshay 🚀

39,331 views • 5 months ago

Most people think Rerun is a visualization tool. In reality, it's a database masquerading as a visualizer. I wanted to showcase this functionality by building a full data pipeline consisting of: ingestion → baseline method → eval → finetuning for SLAM on egocentric data. I'll eventually extend this to the rest of my ego/exo datasets, but I wanted to start with a smaller bunch of datasets first. Rerun allows you to expose your saved .rrd files to a catalog where you store datasets. You can query, filter, and join them like any database using DataFusion under the hood. These are the same .rrd files that are automatically generated whenever you visualize anything in Rerun and decide to save it to disk. I brought in 109 VSLAM-LAB sequences across 14 datasets into the Rerun catalog as an example. These include 7Scenes, Euroc, eth3d, and others. Now I can query them with segment_table, filter_segments, and filter_contents instead of parsing CSVs and YAML files. With a strong set of ground-truth datasets for SLAM, baseline additions become nearly automatic with agents like Opus/Codex. This unification of data and visualization is imo the largest missing part for Physical AI. Visualization becomes a natural byproduct of having your data properly structured and queryable. The catalog API is what makes it a database, not just a viewer. I initially focused on VSLAM-LAB data, but I'll migrate all the egoexo data to this format in the coming days to really show just how useful this is.

Pablo Vela

34,937 views • 2 months ago

Introducing Rei Terminal [alpha-test] The frontend team cooked an early private-instance test for our holders while Rei SDK and Rei Core API teams are deep in code 👀 With Rei Quant Terminal Alpha, you can query for market insights, comparative analysis, trending tokens, token deep dives, sentiment analysis and more. 𝌭Query Examples to get started: Market Insights: -Give a brief recap of the crypto market and major news today. -Give a rundown on recent news and correlate the sentiment with performance of best categories of tokens. -What's the latest news in crypto? -What's the crypto market sentiment based on social media mentions? -What are the top 3 sectors gaining traction? -Give me the top holders holders of (insert token) Comparative Analysis: -How does AI agent category compare to the rest of the market? -Show me the AI agent token with the highest volume in the last 24 hours. -Which token had the most volatile price swings in the last 7 days? Trending Tokens: -What was the hottest coin on Base and Solana in the last 72 hours? -Which tokens are gaining the most traction right now? Token Deep Dives: -Give me a deep dive analysis of [contract address] including price target, price action, volume, sentiment. 𝌭Access Everyone who has alpha-tester role in Discord is automatically eligible. Min wallet balance: 800k $REI. Tiers will be added later. Access now → 𝌭Query Limits For the first Two days there will be a query limit of 10 per hour. The limit will be lifted gradually, in time all queries will be unlimited. 𝌭PSA With the current version, Rei is working as everyone's quant/assistant and will require users to press "Clear Conversation" to clear context, conversation archives will be integrated later, Deep Memory Will be integrated after we are done mapping the APIs. Let us know your feedback via Discord alpha-testing channel!

Rei

30,951 views • 1 year ago

A new roadmap. A New Era of The Graph 🗺️ The Graph’s new roadmap introduces a bold and transformative vision for the future of The Graph! The new R&D roadmap details an expansion of The Graph’s ability to serve web3’s growing demands for data access, while better serving builders and protocol contributors, and improving the overall simplicity and efficiency of the network. After three years of serving builders, The Graph Network is mature, reliable, and performant. The Graph ecosystem has followed through on its commitment to democratize access to blockchain data while also establishing subgraphs as a web3 standard. But The Graph’s innovation journey doesn’t end there. The New Era of The Graph is organized into five core objectives: 1️⃣ World of Data Services: Expanding to provide new data services beyond subgraphs to deliver a rich market of data on the network, serving novel use cases for data scientists and more. This will include more data sources, new query languages, and support for LLMs. 2️⃣ Developer Empowerment: Supporting developers through enhanced DevEx and tooling by introducing streamlined billing, clear pricing models, a new free query plan, and reduced gas fees. A more SaaS-like experience for devs, without compromising on decentralization! 3️⃣ Protocol Evolution & Resiliency: Delivering improvements resulting in a more resilient, flexible, and simple protocol, including updates to delegation. 4️⃣ Optimized Indexer Performance: Boosting network performance with improved Indexer tooling and operational capabilities to deliver increased scalability, reduce costs, and enhanced network reliability. 5️⃣ Interconnected Graph of Data: Creating tools for composable data and a global, organized knowledge graph – interlinking open data and making it easier to build upon. The new roadmap sets in motion an exciting evolution in web3 data infrastructure. In a phased rollout, The Graph will introduce many new features and benefits, including the integration of new data services, new query languages, enhanced developer tooling, improved UX + UI, alongside greater protocol efficiency and resilience. As this new era unfolds, The Graph crystallizes as the connective tissue across the many layers of the web3 stack, evolving into a comprehensive, interwoven graph of data equipped to serve every project dreamt up by web3’s innovators. Read the full announcement linked in the comment below!

The Graph

425,326 views • 2 years ago

A DEVELOPER FOUND SEVEN WAYS TO TAKE DOWN A PRODUCTION DATABASE THAT ALL LOOK EXACTLY LIKE NORMAL, INNOCENT CODE AND ALMOST EVERY TEAM IS SHIPPING AT LEAST ONE OF THEM RIGHT NOW 17 minutes from Josh Berkus, one of the people who actually maintains PostgreSQL, walking through the quiet mistakes that turn a healthy database into a 3am outage. -> The moment it lands, you realize none of these are exotic attacks. They're ordinary-looking decisions -- a query that locks a table, a connection that never closes, a setting no one ever questioned -- that work perfectly until the day they don't, and then they take everything down with them. The scary part isn't that the database breaks. It's how normal the code looks right up until it does. A query that runs in 5ms on your laptop and 5 minutes on prod. A migration that silently locks the whole table. A connection pool that runs dry the moment real traffic shows up. Every one of them passed review. Writing SQL that runs was never the hard part -> writing SQL that survives production is. And now that an AI agent is generating and firing queries at your real database faster than anyone can read them, every one of those seven landmines is one autocomplete away -- and the only person who can stop it is the one who already knows where they're buried. Your database doesn't go down because someone attacked it. It goes down because something that looked completely normal finally caught up with it. Save and Watch it today. You'll see the next outage coming before it lands ↓

slash1s

22,268 views • 1 month ago