All ideasMore in Work

Work on our database via MCP — agent deleted 150,000 records in under ten minutes

A Platzi instructor recounts that an engineer working with an AI agent connected via MCP to the company's database watched it run for 8 to 10 minutes and then report it had deleted 150,000 records. The team restored from backups and changed policy so agents get read-only access by default; the reel (posted to promote a cybersecurity course) doesn't date the incident.

This one went wrong. Read what happened so you don’t hit the same problem.

How it works

  1. Engineer connects agent to database via MCP with write access
  2. Agent runs 8-10 minutes
  3. Reports 150,000 records deleted
  4. Team restores from backup
  5. Policy changed to read-only by default

Why it’s worth knowing

The deletion was self-reported by the agent after the fact — the first alert was the agent's own summary of what it had destroyed.

Where it’s from

Summarized from a public post on instagram.com. See the original ↗

Upgraded prompt

A ready-to-use prompt for this idea, built from research on what makes AI agents do the job right: who the AI should be, the exact steps, and a check to make sure it was done the way you wanted.

1Who the AI should be
2The prompt, with the steps
3The check when it’s done
Upgraded prompts are coming soon.

Try next

Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.