LibreDB Studio is the open-source database IDE that deploys next to your data instead of onto your laptop — one browser tab for PostgreSQL, MySQL, MongoDB, Redis and thirteen more engines, with SSO and audit built in.https://libredb.orgenhttps://libredb.org/blog/counting-databaseshttps://libredb.org/blog/counting-databasesThree different true answers to the simplest question anyone asks about a database tool, and why the registry behind them records a refusal as carefully as it records a success.Sat, 29 Aug 2026 14:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/what-one-interface-costshttps://libredb.org/blog/what-one-interface-costsOne tree, one editor and one results grid for relational, document, key-value, analytical, search and federated engines — and the capability flags that stop that promise from breaking on the fourth engine.Sat, 29 Aug 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/postgresql-query-audit-trail-admin-onlyhttps://libredb.org/blog/postgresql-query-audit-trail-admin-onlyA searchable history of statements, outcomes and error detail, readable by admins only, and on this engine it also records what the agent was permitted to run.Tue, 25 Aug 2026 09:00:00 GMTEngineeringSecurityLibreDBhttps://libredb.org/blog/mysql-wire-compatible-engines-one-providerhttps://libredb.org/blog/mysql-wire-compatible-engines-one-providerMariaDB, Percona, TiDB, Vitess and five more arrive through the same MySQL connection, and protocol compatibility is not capability compatibility.Sun, 23 Aug 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/postgresql-managed-url-ssl-modeshttps://libredb.org/blog/postgresql-managed-url-ssl-modesHost-heuristic SSL turns encryption on without verifying the certificate, and two sslmode values are declined by name rather than guessed at.Thu, 20 Aug 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/mongodb-profiler-slow-querieshttps://libredb.org/blog/mongodb-profiler-slow-queriesThe panel names the command to run instead of showing a blank table, and the metrics beside it are omitted rather than reported as zero.Mon, 17 Aug 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mysql-performance-schema-off-metrics-absenthttps://libredb.org/blog/mysql-performance-schema-off-metrics-absentCache hit ratio, queries per second and buffer-pool usage are omitted rather than defaulted, and two more figures mean less than their names suggest.Fri, 14 Aug 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/postgresql-health-panels-extension-gatedhttps://libredb.org/blog/postgresql-health-panels-extension-gatedA tour of the health surface organised by what is missing and why, because a panel that reads Not measured is the only version an operator can act on.Tue, 11 Aug 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/cassandra-scylladb-through-one-providerhttps://libredb.org/blog/cassandra-scylladb-through-one-providerThe editor, the object browser and every CQL type read back identically, and the panels that go quiet do so because one virtual keyspace is not there.Sun, 09 Aug 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/redis-tls-rediss-verificationhttps://libredb.org/blog/redis-tls-rediss-verificationA pasted rediss URL selects encryption without verification, because nothing in a URL says whose certificate to trust; verification stays an explicit choice.Thu, 06 Aug 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/couchbase-unindexed-collection-scanhttps://libredb.org/blog/couchbase-unindexed-collection-scanOn recent server versions a sequential scan makes an un-indexed keyspace open slowly, so a primary index is a recommendation now rather than a prerequisite.Mon, 03 Aug 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mongodb-no-foreign-keys-diagramhttps://libredb.org/blog/mongodb-no-foreign-keys-diagramThe empty relation list here means impossible rather than none found, and the relationships a document model leaves for you to know live in the shape and in the pipeline.Fri, 31 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/trino-password-requires-tlshttps://libredb.org/blog/trino-password-requires-tlsMeasured against a coordinator with authentication switched off, a basic auth header over plain HTTP still answers 401, so the connection is refused early.Wed, 29 Jul 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/clickhouse-tls-platform-trust-storehttps://libredb.org/blog/clickhouse-tls-platform-trust-storeAn https URL sets TLS and moves the default port, but only the platform trust store applies, so a custom CA has nowhere to go on this transport.Sun, 26 Jul 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/duckdb-storage-panels-no-sessionshttps://libredb.org/blog/duckdb-storage-panels-no-sessionsTwo catalog functions other engines have are absent here, so both panels stay empty carrying the engine own error, and table bytes are block-granular.Thu, 23 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlite-server-side-file-pathhttps://libredb.org/blog/sqlite-server-side-file-pathThere is no network protocol, so the form collapses to one input and a remote user of a hosted deployment cannot open a file from their own machine.Mon, 20 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mysql-explain-format-json-plan-treehttps://libredb.org/blog/mysql-explain-format-json-plan-treeWhat the plan tree answers on MySQL, and where the surrounding introspection runs out: index figures here are estimates of distinct values.Fri, 17 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/postgresql-explain-analyze-executeshttps://libredb.org/blog/postgresql-explain-analyze-executesTwo EXPLAIN forms with different consequences: the editor emits the executing one, and the agent path emits the planning one only.Wed, 15 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/the-tool-goes-to-the-datahttps://libredb.org/blog/the-tool-goes-to-the-dataWhy a database IDE belongs in the network beside the database, and what that constraint forces the architecture to look like.Tue, 14 Jul 2026 09:00:00 GMTEngineeringLibreDBhttps://libredb.org/blog/cassandra-no-explain-in-cqlhttps://libredb.org/blog/cassandra-no-explain-in-cqlThe keyword is not in the grammar at all, and the only alternative profiles a statement that has already run, which is not a plan and is not offered as one.Sun, 12 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/redis-monitoring-info-slowloghttps://libredb.org/blog/redis-monitoring-info-slowlogHealth, performance, slow log and clients all derive from Redis introspection commands, while the table and index panels come back empty because Redis has neither.Thu, 09 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/couchbase-sqlpp-document-keyhttps://libredb.org/blog/couchbase-sqlpp-document-keySelecting everything nests the document and drops the key, so generated statements project it explicitly, and that alias is why cell editing is switched off.Mon, 06 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mongodb-json-command-editorhttps://libredb.org/blog/mongodb-json-command-editorA statement beginning db. cannot run here at all, and the two operations that look alike have very different default bounds on the result set.Sat, 04 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/trino-offset-before-limit-stateless-sessionhttps://libredb.org/blog/trino-offset-before-limit-stateless-sessionThe clause order is transposed for you and a trailing semicolon is a syntax error, while a session setting succeeds and then affects nothing.Wed, 01 Jul 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/druid-sql-cannot-writehttps://libredb.org/blog/druid-sql-cannot-writeUpdate and delete are not in this SQL anywhere, create is not in the grammar, and the refusals are surfaced word for word instead of rewritten.Sun, 28 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/clickhouse-row-editing-alter-updatehttps://libredb.org/blog/clickhouse-row-editing-alter-updateA bare update statement answers not implemented on this engine, so no editable cell is offered, and the documented route reports zero rows changed.Thu, 25 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/duckdb-single-process-file-lockhttps://libredb.org/blog/duckdb-single-process-file-lockA second read-only process is refused with the same lock error as a second writer, which makes two Studio replicas on one file a broken configuration.Mon, 22 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlite-query-plan-without-costshttps://libredb.org/blog/sqlite-query-plan-without-costsThe query plan returns step descriptions and nothing else, so the rendering shows structure and answers index questions rather than cost questions.Sat, 20 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlserver-view-server-state-monitoringhttps://libredb.org/blog/sqlserver-view-server-state-monitoringReal blocked-session detection and real index seek and scan counts are things most engines cannot give, and a restricted login still sees none of them.Wed, 17 Jun 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/oracle-thin-mode-service-namehttps://libredb.org/blog/oracle-thin-mode-service-nameThin mode is the default and needs no native client, and the field people get wrong is the one Oracle actually connects to: a service, not a database name.Sun, 14 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mysql-er-diagram-single-database-scopehttps://libredb.org/blog/mysql-er-diagram-single-database-scopeEvery introspection query binds to the connected database, so a reference that crosses schemas simply does not appear as an edge on the diagram.Thu, 11 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/postgresql-er-diagram-two-phase-introspectionhttps://libredb.org/blog/postgresql-er-diagram-two-phase-introspectionThe schema tree renders before relationships arrive, and every introspection CTE is materialized on purpose: a 122-table read measured about 295 seconds before the change and about 2.6 seconds after.Tue, 09 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/opensearch-sql-grammar-surpriseshttps://libredb.org/blog/opensearch-sql-grammar-surprisesA double-quoted identifier is a string literal here, so a filter on one compares two literals and answers nothing with a perfectly successful response.Sat, 06 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/elasticsearch-sql-not-query-dslhttps://libredb.org/blog/elasticsearch-sql-not-query-dslThere are no writes in this grammar at all, no second page, and a trailing semicolon is a syntax error, so the list of edges is the useful part.Wed, 03 Jun 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/cassandra-monitoring-panels-that-refusehttps://libredb.org/blog/cassandra-monitoring-panels-that-refuseTable, index and storage statistics send no statement at all and carry the measurement behind the refusal, because no honest count or size exists to publish.Sun, 31 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/libredb-monitoring-refusal-taxonomyhttps://libredb.org/blog/libredb-monitoring-refusal-taxonomyTwo panels refuse with their reason, one stays empty in the engine's own words, a third reads not measured, and each of those is a different claim about the database.Thu, 28 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/redis-key-prefixes-derived-groupingshttps://libredb.org/blog/redis-key-prefixes-derived-groupingsPrefix groups come from a bounded cursor scan, so several per-row actions are hidden rather than offered against something no command can address.Tue, 26 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/couchbase-plan-tree-estimateshttps://libredb.org/blog/couchbase-plan-tree-estimatesThis dialect has no analyze form, so the direct action and the background pre-warm show the same estimate, and a negative cost renders as no estimate.Sat, 23 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mongodb-inferred-schema-samplehttps://libredb.org/blog/mongodb-inferred-schema-sampleThere is no catalog to read, so the sidebar samples each collection and states its own reach - three levels deep, arrays closed, two hundred fields.Wed, 20 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/trino-no-keys-boxes-without-edgeshttps://libredb.org/blog/trino-no-keys-boxes-without-edgesThe catalog views a connector could declare a key through do not exist here, so the empty edge set is the engine answer rather than an empty schema.Sun, 17 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/druid-sessions-are-ingestion-taskshttps://libredb.org/blog/druid-sessions-are-ingestion-tasksRows come from the task table and every column is relabelled to say so, because there is no session catalog and no query log anywhere to read.Thu, 14 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/clickhouse-no-foreign-keys-diagramhttps://libredb.org/blog/clickhouse-no-foreign-keys-diagramAn empty edge list here is the engine answer, not an unfinished read: no engine, no table setting and no DDL declares a foreign key anywhere.Tue, 12 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/duckdb-parquet-csv-editor-versus-agenthttps://libredb.org/blog/duckdb-parquet-csv-editor-versus-agentFile-reaching SQL works on the writable editor connection and is refused under the read-only agent handle, so the capability has to be stated with that split.Sat, 09 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/libsql-turso-url-and-auth-tokenhttps://libredb.org/blog/libsql-turso-url-and-auth-tokenThe credential is an auth token rather than a password and the database is the host, so the dialog renders no user name and no database input at all.Wed, 06 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlite-path-is-the-trust-boundaryhttps://libredb.org/blog/sqlite-path-is-the-trust-boundaryPath validation rejects a null byte and nothing else, so any logged-in user can open any SQLite file the Studio process is able to read.Sun, 03 May 2026 09:00:00 GMTEngineeringSecurityLibreDBhttps://libredb.org/blog/sqlserver-result-grid-numeric-fidelityhttps://libredb.org/blog/sqlserver-result-grid-numeric-fidelityWide integers and high-scale decimals arrive as JavaScript numbers, only the first result set of a batch is read, and one paged statement is not recognised.Fri, 01 May 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/oracle-number-and-timestamp-fidelityhttps://libredb.org/blog/oracle-number-and-timestamp-fidelityA wide NUMBER arrives as a double and drops digits, and a timestamp with a zone folds its offset into UTC, so both are recorded rather than smoothed over.Tue, 28 Apr 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mysql-connection-uri-ssl-ignoredhttps://libredb.org/blog/mysql-connection-uri-ssl-ignoredSupplying a connection string takes a different branch entirely, so the SSL panel, the timezone and cloud detection stop applying and must live in the URI.Sat, 25 Apr 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/postgresql-editor-automatic-row-limitshttps://libredb.org/blog/postgresql-editor-automatic-row-limitsAutomatic LIMIT injection applies to unbounded SELECT and CTE-SELECT statements only, and there is one statement shape it deliberately leaves alone.Wed, 22 Apr 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/opensearch-security-plugin-tlshttps://libredb.org/blog/opensearch-security-plugin-tlsA default distribution serves HTTPS with a self-signed certificate on the same port, and no custom CA can be supplied on this transport.Sun, 19 Apr 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/elasticsearch-mapping-is-the-schemahttps://libredb.org/blog/elasticsearch-mapping-is-the-schemaAn index that maps container fields answers a select-everything statement with no columns at all, so the schema tree is built from the mapping instead.Fri, 17 Apr 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/cassandra-local-data-center-fieldhttps://libredb.org/blog/cassandra-local-data-center-fieldThe driver refuses to build a load-balancing policy without a local data centre, which is why that field sits in the open rather than under Advanced.Tue, 14 Apr 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/libredb-five-verb-command-grammarhttps://libredb.org/blog/libredb-five-verb-command-grammarThe whole grammar is get, put, delete, prefix and range, and yet the tree still shows declared columns for the namespaces that have them.Sat, 11 Apr 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/redis-compatible-servers-one-type-idhttps://libredb.org/blog/redis-compatible-servers-one-type-idThere is no separate connection type and no per-server branch, so the version panel shows the compatibility level a server publishes, not its product release.Wed, 08 Apr 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/couchbase-monitoring-catalog-rolehttps://libredb.org/blog/couchbase-monitoring-catalog-roleWithout the query system catalog role, slow queries and sessions are empty and denied metrics are omitted rather than reported as zero.Mon, 06 Apr 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/mongodb-authsource-connection-failurehttps://libredb.org/blog/mongodb-authsource-connection-failureauthSource names the database the credentials live in, not the one you are opening, and getting it wrong fails exactly like a bad password.Fri, 03 Apr 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/trino-monitoring-owns-no-storagehttps://libredb.org/blog/trino-monitoring-owns-no-storageNodes, sessions, slow queries and per-catalog connectors all report, while database size is N/A rather than zero, because there is no storage to measure.Tue, 31 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/druid-router-or-broker-connectionhttps://libredb.org/blog/druid-router-or-broker-connectionBoth ports serve the identical SQL endpoint and nothing in the connection knows which it reached, and there is no database field because there is one catalog.Sat, 28 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/clickhouse-monitoring-system-tableshttps://libredb.org/blog/clickhouse-monitoring-system-tablesEvery ClickHouse monitoring panel is a read of a catalog the server already maintains, with two boundaries: a setting that empties one panel, and a counter nobody publishes.Wed, 25 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/duckdb-explain-estimates-onlyhttps://libredb.org/blog/duckdb-explain-estimates-onlyThe timing form of EXPLAIN executes the statement it was asked to explain, so it is never emitted and no measured node timings are published.Mon, 23 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/libsql-self-hosted-sqldhttps://libredb.org/blog/libsql-self-hosted-sqldA server started without authentication takes no token at all, and sending an empty one is rejected rather than treated as an anonymous connection.Fri, 20 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlite-no-transaction-controlshttps://libredb.org/blog/sqlite-no-transaction-controlsThe provider holds no session across two requests, so the begin, commit and rollback controls are withheld rather than offered and then failed.Tue, 17 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlserver-no-execution-plan-shownhttps://libredb.org/blog/sqlserver-no-execution-plan-shownThe showplan setting is session-level state and the explain path sends one statement, so the capability is declared false and the action is hidden.Sat, 14 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/oracle-no-explain-plan-renderinghttps://libredb.org/blog/oracle-no-explain-plan-renderingOracle has EXPLAIN PLAN and DBMS_XPLAN; what is missing is a two-statement wrapper, so the capability is declared false and the action is hidden.Thu, 12 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mysql-connect-docker-pool-limitshttps://libredb.org/blog/mysql-connect-docker-pool-limitsPort 3306 with the fixture credentials, the container-network case, and the pool settings that are quietly ignored because the driver model differs.Mon, 09 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/postgresql-connect-docker-containerhttps://libredb.org/blog/postgresql-connect-docker-containerThe container-to-container case is the one that breaks: when Studio is itself a container, localhost is its own loopback and the service name is the fix.Fri, 06 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/opensearch-monitoring-partial-absencehttps://libredb.org/blog/opensearch-monitoring-partial-absenceA failed cluster read produces no storage row at all rather than one claiming zero bytes, and a partial sum is refused for exactly the same reason.Tue, 03 Mar 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/elasticsearch-document-counts-and-empty-metricshttps://libredb.org/blog/elasticsearch-document-counts-and-empty-metricsNested elements are stored as documents of their own, so the panel and the editor legitimately disagree, and one panel asks the cluster nothing at all.Sat, 28 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/cassandra-cql-paging-and-cancellationhttps://libredb.org/blog/cassandra-cql-paging-and-cancellationA second page is refused with its reason rather than silently re-serving the first, and there is no cancel path at all on this engine to fall back on.Thu, 26 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/libredb-embedded-file-exclusive-lockhttps://libredb.org/blog/libredb-embedded-file-exclusive-lockThere is no host, no port and no server, and the lock sidecar means command-line tooling cannot hold the same file while a connection is open.Mon, 23 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/redis-agent-plan-bounded-inventoryhttps://libredb.org/blog/redis-agent-plan-bounded-inventoryBecause the rows are groupings from a bounded scan, the plan rules carry a sentence saying so, what a command may name instead, and how far the list reaches.Fri, 20 Feb 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/couchbase-capella-connectionhttps://libredb.org/blog/couchbase-capella-connectionA managed endpoint carries neither a port nor a bucket path, so the scheme supplies the port and the TLS mode while the bucket is typed by hand and nothing is invented for it.Tue, 17 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mongodb-atlas-srv-tls-modeshttps://libredb.org/blog/mongodb-atlas-srv-tls-modesAn SRV URI implies TLS in the driver and maps the form to a verifying mode, but two of the five SSL choices build the same options object.Sat, 14 Feb 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/trino-explain-format-json-onlyhttps://libredb.org/blog/trino-explain-format-json-onlyOnly the planning form is ever emitted, because the analyze form executes the statement and a plan view reaching object storage twice is a real invoice.Thu, 12 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/druid-plan-tree-without-costshttps://libredb.org/blog/druid-plan-tree-without-costsThe plan returns the native query the cluster will run, rendered in its own operator vocabulary, and the planner publishes no cost and no row estimate.Mon, 09 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/clickhouse-http-interface-8123https://libredb.org/blog/clickhouse-http-interface-8123Port 8123 is the whole transport, the native port is never used, and a permission denial arrives as a 500, so failures are read by exception code.Fri, 06 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/duckdb-er-diagram-current-database-scopehttps://libredb.org/blog/duckdb-er-diagram-current-database-scopeForeign keys come from a single bulk read of the constraint catalog, and every catalog statement the DuckDB provider issues is scoped to the current database.Tue, 03 Feb 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/libsql-read-only-token-boundaryhttps://libredb.org/blog/libsql-read-only-token-boundaryThe server refuses the pragma a database-native read-only profile depends on, so the boundary moves from the session to the token the database issues.Sun, 01 Feb 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/sqlite-health-without-a-serverhttps://libredb.org/blog/sqlite-health-without-a-serverHealth is an integrity check, a journal mode and file sizes, and one per-table figure depends on which built-in driver the deployment is running.Thu, 29 Jan 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlserver-encrypted-not-authenticatedhttps://libredb.org/blog/sqlserver-encrypted-not-authenticatedEncryption is on out of the box while certificate validation is off for any host that is not the recognised managed one, and two named modes do not pin a CA.Mon, 26 Jan 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/oracle-monitoring-privilege-questionhttps://libredb.org/blog/oracle-monitoring-privilege-questionA least-privilege application user gets a dashboard that renders with gaps, because each dynamic-view read is guarded on its own rather than as one block.Fri, 23 Jan 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/mysql-cancel-runaway-queryhttps://libredb.org/blog/mysql-cancel-runaway-queryNo server-side statement timeout is wired into the pool, so nothing kills a long query on its own and cancellation is an explicit act with a caveat.Tue, 20 Jan 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/postgresql-agent-read-only-boundaryhttps://libredb.org/blog/postgresql-agent-read-only-boundaryContainment is the database itself - a read-only transaction, exactly one statement on the extended protocol, then ROLLBACK and DISCARD ALL.Sun, 18 Jan 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/opensearch-agent-plan-sql-not-dslhttps://libredb.org/blog/opensearch-agent-plan-sql-not-dslA plan run once answered with a native aggregation body, correct for the cluster and unrunnable in the editor, so the contract now names the dialect outright.Thu, 15 Jan 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/elasticsearch-connect-four-fieldshttps://libredb.org/blog/elasticsearch-connect-four-fieldsAn index has no namespace above it, so a database selector would be a control with no effect, and a self-signed cluster certificate has nowhere to go here.Mon, 12 Jan 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/cassandra-column-order-and-no-foreign-keyshttps://libredb.org/blog/cassandra-column-order-and-no-foreign-keysThe catalog reports no position for regular columns and sorts by name, so the tree rebuilds the order a where clause actually needs.Fri, 09 Jan 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/libredb-agent-plan-derived-namespaceshttps://libredb.org/blog/libredb-agent-plan-derived-namespacesThe grounding read is bounded by the provider itself, and the plan rules say outright that the rows are groupings derived from one scan.Wed, 07 Jan 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/redis-acl-user-degraded-connectionhttps://libredb.org/blog/redis-acl-user-degraded-connectionA Redis ACL user without the INFO grant connects and browses keys, while health, overview and performance raise a permission error and the connection test reports degraded.Sun, 04 Jan 2026 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/couchbase-bucket-and-discovered-query-porthttps://libredb.org/blog/couchbase-bucket-and-discovered-query-portOnly the management port is stored, and the query endpoint comes from the cluster's own node services, preferring the external address it advertises.Thu, 01 Jan 2026 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mongodb-agent-plan-declining-checkshttps://libredb.org/blog/mongodb-agent-plan-declining-checksThe read-only guard and the identifier reader are SQL readers, so on a MongoDB draft they record that they do not apply instead of passing it.Mon, 29 Dec 2025 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/trino-database-field-is-a-cataloghttps://libredb.org/blog/trino-database-field-is-a-catalogPinning a catalog scopes the whole tree two levels deep, and a connection that pins none still connects and runs fully qualified statements with no tree.Fri, 26 Dec 2025 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/druid-catalog-shows-what-is-servablehttps://libredb.org/blog/druid-catalog-shows-what-is-servableMarking segments unused removes a datasource from the catalog entirely, and a stopped node makes an existing one answer with the same error as a typo.Wed, 24 Dec 2025 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/clickhouse-explain-json-plan-treeshttps://libredb.org/blog/clickhouse-explain-json-plan-treesThe estimated plan is the only plan there is, because this engine never executes the statement to produce one, so nothing in the view was measured.Sun, 21 Dec 2025 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/duckdb-agent-external-access-boundaryhttps://libredb.org/blog/duckdb-agent-external-access-boundaryUnder read-only access alone, file copies, exports, extension installs and filesystem reads all succeeded while an insert was refused in the same session.Thu, 18 Dec 2025 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/libsql-monitoring-stateless-hranahttps://libredb.org/blog/libsql-monitoring-stateless-hranaActive connections are absent rather than zero and no connection ceiling is published, while table and index bytes are real because the storage view answers.Mon, 15 Dec 2025 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/sqlite-agent-read-only-two-controlshttps://libredb.org/blog/sqlite-agent-read-only-two-controlsA read-only open reads the query-only pragma back as off, so the profile sets it too and re-verifies it before every statement it sends.Sat, 13 Dec 2025 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/sqlserver-azure-sql-restricted-dmvshttps://libredb.org/blog/sqlserver-azure-sql-restricted-dmvsThe one managed host the code recognises by name switches certificate validation on, and the same move narrows the monitoring and maintenance surface.Wed, 10 Dec 2025 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/oracle-er-diagram-owner-scopedhttps://libredb.org/blog/oracle-er-diagram-owner-scopedFive bulk dictionary reads build the tree regardless of table count, and every one of them is filtered by owner, so other schemas are simply not drawn.Sun, 07 Dec 2025 09:00:00 GMTEngineeringDatabasesLibreDBhttps://libredb.org/blog/mysql-agent-plan-mode-grounded-draftshttps://libredb.org/blog/mysql-agent-plan-mode-grounded-draftsThe tool-using run ends engine-unsupported here, so the useful post is what plan mode does instead: read the real schema and hand a statement to a person.Thu, 04 Dec 2025 09:00:00 GMTEngineeringDatabasesSecurityLibreDBhttps://libredb.org/blog/postgresql-agent-least-privilege-rolehttps://libredb.org/blog/postgresql-agent-least-privilege-roleAgent AUTO mode refuses a superuser connection outright, so the deployment task is a login holding CONNECT, USAGE and SELECT and nothing else.Mon, 01 Dec 2025 09:00:00 GMTEngineeringDatabasesSecurityLibreDB