Preventing context bloat and agent loops in database MCP servers

I've been running Cursor and Claude Code with MCP for a while now, and one thing became obvious pretty quickly: Giving an agent a generic execute_sql tool is usually a terrible idea. The first problem...