can ai run t-sql against sql server

It can use whichever actions SQL Server’s API exposes for a connected account. Read the Available tools list on the app’s detail page under Settings, Integrations rather than assuming a general query tool is present.

what sql server permissions should an ai login have

db_datareader on a single database, on a dedicated login, ideally pointed at a read-only replica. Add a resource governor limit too, because old schemas and unfamiliar joins produce expensive plans.

is microsoft sql server a native strawberry integration

It connects as an account you authorise, with the credential stored encrypted where Strawberry never receives it. You see the exact permissions before you approve them, and consequential steps stop at an approval card.

SQL Server Strawberry

The monthly summary, written before you open SSMS

A companion reads the SSRS report, matches it to the ticket queue and writes the summary that currently gets assembled by hand. Where the instance is reachable, it reads that in the same pass.

A SQL Server instance of any age is surrounded by things that are not SQL Server. An SSRS report somebody still receives by email. An Excel file that is the real source of truth for two columns. A ticketing system that references order numbers, and an ERP screen where the correction gets typed.

All of that is browser work, and a companion does it end to end: read the report, match the tickets, open the ERP screen, write the summary. The instance itself connects as an account you authorise wherever it is reachable from outside your network.

Which SQL Server instances can be connected?

Managed instances, comfortably.

If you run SQL Server on a cloud provider with a public endpoint and an IP allowlist, adding the connection is a firewall change and a login. The same is true of any instance your team has exposed to a named source range.

The connection opens a socket to a host and port from outside your network, so a private-only instance waits until somebody provisions an endpoint for it. The work in the section below runs either way, because none of it touches the database.

What does the connection give you?

The actions SQL Server’s API exposes, through a connected account whose credential is stored encrypted where Strawberry never sees it. The exact tool list is in the Available tools section of the app’s detail page under `strawberry://settings/integrations`, with the read-only ones marked.

The Permissions block sets every action to Ask every time, Always allow, or off, on top of the approval card consequential steps already stop at. On a database this central, switch off everything that writes and leave the reads running.

A dedicated SQL login mapped to a user with `db_datareader` on one database, and nothing more.
A read-only replica or an Always On secondary if you have one available.
A query governor or resource pool, because legacy schemas produce spectacular execution plans.
Firewall allowlisting narrowed to whatever source range the connection actually uses.

Get the monthly summary written for you

A companion working your signed-in accounts reads the SSRS report, matches it to the tickets, opens the ERP screen where the correction has to be typed, and writes the summary that currently gets assembled by hand each month. That is operations work and none of it needs the database.

It reads the fortieth ticket as carefully as the first, at 17:40 on the last working day of the month. If your estate is mostly Microsoft, ai for it admins and the Microsoft Lists page are the nearest neighbours.

Experience Strawberry for free

Download

Trusted by fast-growing companies worldwide

Frequently asked questions

It needs a reachable host and port. A managed instance with a public endpoint and an editable allowlist works today. The reporting work around the instance needs neither, because it happens in the tabs you are signed into.

Strawberry is free to download and includes AI credits to start. Paid plans begin at $20/month. See pricing. · Reviewed August 20, 2026 · Canonical facts for AI agents