Skip to content
EN
English 简体中文 soon 日本語 soon

Vanna.AI

SQL agents with access control

Visit official site

What Vanna is

Vanna is an open source framework for building SQL agents. It lets people ask database questions in natural language and get answers through generated SQL, and version 2 adds user-scoped execution, rich UI components and quota management so agents can be put in front of real users.

It works with any language model provider and database combination.

What you can do it

  • Build a chat interface over your database
  • Let non-specialists query data
  • Keep queries within each user's permissions
  • Cap usage with quotas

Who it is for

  • Data and platform teams
  • Companies opening data access internally

What to watch out for

  • Generated SQL runs against real data, so read-only roles and row-level permissions are essential
  • A natural language answer can be confidently wrong; show the SQL and let users check it
  • Model providers receive schema and question text unless you self-host
  • Confirm current provider and database support

Pros & cons

✓ What we like

  • Open source with access control
  • Provider and database agnostic
  • Built for production use with users

! What to watch out for

  • Query safety needs role design
  • Answers can be confidently wrong
  • Schema exposure to model providers

FAQ

What is it for?

Building agents that answer database questions using generated SQL.

Can I control what users see?

User-scoped execution and access control are described as core features.

Which databases work?

The site states it works with any database and any model provider.

Last reviewed: 2026-09-17

More AI coding tools tools

View all →

How we review