Letting AI agents query my databases without ever giving them the credentials

Every time I connect an AI agent to a database, the same question comes up: where does the connection...