PostgreSQL

Connect your PostgreSQL databases to enable Tony (Database Engineer) to analyze queries, optimize performance, and monitor database health.

Supported platforms

Platform	Support
Self-hosted PostgreSQL	12.x, 13.x, 14.x, 15.x, 16.x
AWS RDS PostgreSQL	All versions
AWS Aurora PostgreSQL	All versions
Google Cloud SQL	All PostgreSQL versions
Azure Database for PostgreSQL	Flexible Server, Single Server

Prerequisites

A PostgreSQL instance reachable from CloudThinker over the network.
Admin access to create a dedicated user and grant privileges.
The pg_stat_statements extension installed if you want query-level analysis (required for slow-query data).

Setup

Connect as admin

Connect to your PostgreSQL instance using an admin account:

psql -h your-host -U postgres -d your-database

Create a read-only user

Create a dedicated user for CloudThinker:

CREATE USER cloudthinker_readonly WITH PASSWORD 'your-secure-password';

Grant connection and schema access

Allow connection and schema usage:

GRANT CONNECT ON DATABASE your_database TO cloudthinker_readonly;
GRANT USAGE ON SCHEMA public TO cloudthinker_readonly;
GRANT USAGE ON SCHEMA information_schema TO cloudthinker_readonly;

Grant SELECT permissions

Grant SELECT on all tables and views, including future ones:

GRANT SELECT ON ALL TABLES IN SCHEMA public TO cloudthinker_readonly;
GRANT SELECT ON ALL TABLES IN SCHEMA information_schema TO cloudthinker_readonly;

ALTER DEFAULT PRIVILEGES IN SCHEMA public
GRANT SELECT ON TABLES TO cloudthinker_readonly;

Enable pg_stat_statements

This extension is required for query analysis:

-- Enable extension (requires superuser)
CREATE EXTENSION IF NOT EXISTS pg_stat_statements;

-- Grant access to the user
GRANT SELECT ON pg_stat_statements TO cloudthinker_readonly;

For RDS/Aurora, add to your parameter group:

shared_preload_libraries = 'pg_stat_statements'

Configure network access

Ensure CloudThinker can reach your database:

Add CloudThinker IPs to your security group or firewall
For RDS: enable public access or use VPC peering

Add the connection in CloudThinker

Navigate to Connections → PostgreSQL and enter:

Host: your database hostname or IP
Port: database port (default: 5432)
Database: database name
Username: cloudthinker_readonly
Password: the password you set above
SSL mode: require (recommended)

Click Connect. CloudThinker shows a Connected status once it succeeds.

Connection details

Field	Description	Default
Host	Database hostname or IP	—
Port	PostgreSQL port	`5432`
Database	Database name	—
Username	Dedicated user, e.g. `cloudthinker_readonly`	—
Password	User password	—
SSL mode	`disable`, `allow`, `prefer`, `require`, `verify-ca`, `verify-full`	`require`
Connection timeout	Seconds to wait for connection	`10`
Statement timeout	Max query execution time in ms	`30000`

Connection string format:

postgresql://cloudthinker_readonly:your-secure-password@your-host:5432/your-database

Required permissions

Minimum

GRANT CONNECT ON DATABASE dbname TO cloudthinker_readonly;
GRANT USAGE ON SCHEMA public TO cloudthinker_readonly;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO cloudthinker_readonly;

Recommended (full analysis)

-- All of the above, plus:
GRANT SELECT ON pg_stat_statements TO cloudthinker_readonly;
GRANT SELECT ON pg_stat_activity TO cloudthinker_readonly;
GRANT SELECT ON pg_stat_user_tables TO cloudthinker_readonly;
GRANT SELECT ON pg_stat_user_indexes TO cloudthinker_readonly;
GRANT SELECT ON pg_statio_user_tables TO cloudthinker_readonly;
GRANT pg_read_all_stats TO cloudthinker_readonly;  -- PostgreSQL 14+

Start with the minimum grants and add the recommended stats grants to unlock query-level analysis and cache hit reporting.

Agent capabilities

Once connected, Tony can:

Capability	Description
Query analysis	Identify slow queries, analyze execution plans
Index recommendations	Find missing indexes, identify unused indexes
Performance metrics	Monitor connections, I/O, cache hit rates
Table statistics	Analyze table bloat, dead tuples, vacuum status
Replication monitoring	Check lag and streaming status on replicas

Verify the connection

@tony #report check PostgreSQL connection health and list active database sessions

Example prompts

@tony #report analyze slow queries on the production PostgreSQL instance
@tony #recommend find missing indexes on the orders table
@tony #dashboard show database performance metrics including cache hit rates

Troubleshooting

Connection refused

Verify host and port are correct
Check your security group or firewall allows CloudThinker IPs
For RDS: ensure “Publicly accessible” is enabled or use VPC peering
Confirm PostgreSQL is listening on the correct interface

Authentication failed

Verify username and password are correct
Check pg_hba.conf allows the connection method
Ensure the user has CONNECT privilege on the database

Missing pg_stat_statements

Verify the extension is installed: SELECT * FROM pg_extension WHERE extname = 'pg_stat_statements';
Check shared_preload_libraries includes pg_stat_statements
Restart PostgreSQL after changing shared_preload_libraries
For RDS: modify the parameter group and reboot the instance

Permission denied

Verify the user has SELECT on the required tables
Grant pg_read_all_stats role for PostgreSQL 14+
Check schema permissions with \dn+ in psql

Security

Least privilege — grant only the permissions the agents need for your use case; start read-only and widen later.
Read-only by default — use read-only credentials unless you want agents to make changes through this connection.
Rotate credentials — rotate keys and tokens on your normal schedule; CloudThinker picks up the new value when you update the connection.
Revoke on offboarding — remove the credential at the provider when you delete a connection or a teammate leaves.

SSL required — always use SSL mode require or higher to encrypt data in transit.
Minimal grants — grant only SELECT to the CloudThinker user; never grant write access.

Tony Agent

Database-focused optimization agent

MySQL Connection

Similar setup for MySQL databases

Organization

Agents

Automation & Autonomy

Connections

Platform Settings

Security

Billing

Supported platforms

Prerequisites

Setup

Connection details

Required permissions

Minimum

Recommended (full analysis)

Agent capabilities

Verify the connection

Example prompts

Troubleshooting

Security

Tony Agent

MySQL Connection

​Supported platforms

​Prerequisites

​Setup

​Connection details

​Required permissions

​Minimum

​Recommended (full analysis)

​Agent capabilities

​Verify the connection

​Example prompts

​Troubleshooting

​Security

​Related

Tony Agent

MySQL Connection

Supported platforms

Prerequisites

Setup

Connection details

Required permissions

Minimum

Recommended (full analysis)

Agent capabilities

Verify the connection

Example prompts

Troubleshooting

Security

Related