Agent Authorization for Enterprise Data Changes

The problem

• An agent can have database access without the authority to make a given business change.
• A relative update like bonus = bonus + 20000 hides the resulting value.

What MACAW does

• Checks the write the agent sends through the Databricks MCP server.
• Holds the unclear change for a person. The approver reads the SQL and denies it.
• The row is unchanged.

What’s different

• Business authority, beyond gateway access.
• Approval happens outside the agent.
• The decision and the approval are on the record.

Policy and deployment

Policy

Bonus changes over 10,000, or with a value that can’t be known, need an approver.

Deploy

SecureMCP or SecureMCPProxy in front of the service, with policy in the MACAW control plane.