live wire
▸Snowflake agent evals can pin judge versions; unpinned metrics may roll forward and shift scoresSnowflake▸ThoughtSpot makes Spotter 3 default for new instances; it requires download rights and always shares query data with an LLMThoughtSpot documentation▸MotherDuck adds image classification and object location to prompt_jev(), returning typed SQL outputs with confidence scoresMotherDuck▸BigQuery conversational analytics adds Montréal and Toronto; mixed-region agents still default to globalGoogle Cloud Documentation▸Fabric enables Azure OpenAI Copilot access by default, but OpenAI-subprocessor and cross-region processing/storage switches remain offMicrosoft Learn▸Snowflake Cortex Agents now continue by default when named tools are inaccessible, emitting warnings instead of failing the runSnowflake documentation▸Databricks Genie One can use group memberships to tailor answers, while Unity Catalog remains the access-control boundaryDatabricks documentation▸Fabric data agents can query Power BI models with Read alone; Build and workspace access are unnecessaryMicrosoft Learn▸Fabric data-agent Git configs expose column flags, but selecting a table still includes every columnMicrosoft Learn▸Google Data Agent Kit offers remote Spark kernels, but notebook exports can still move results into local Pandas or ArrowGoogle Cloud Documentation▸Cube says production analytics agents need explicit partial-result states, caller-filtered model search and durable artifactsCube▸Thinking Machines names Bridgewater behind ReViSQL-K2.6, citing 92.97% SC-16 accuracy at 15% of frontier-model costThinking Machines Lab▸AWS says a mismatched data/tool/prompt release cut its Field Sales agent pass rate from 78% to 38% in pre-productionAWS Artificial Intelligence Blog▸NL2SQL Multi-Agent ships evaluation artifacts across BIRD, CSpider, Archer and KDD DataSpace—but no software licenseGitHub▸Snowflake agent evals can pin judge versions; unpinned metrics may roll forward and shift scoresSnowflake▸ThoughtSpot makes Spotter 3 default for new instances; it requires download rights and always shares query data with an LLMThoughtSpot documentation▸MotherDuck adds image classification and object location to prompt_jev(), returning typed SQL outputs with confidence scoresMotherDuck▸BigQuery conversational analytics adds Montréal and Toronto; mixed-region agents still default to globalGoogle Cloud Documentation▸Fabric enables Azure OpenAI Copilot access by default, but OpenAI-subprocessor and cross-region processing/storage switches remain offMicrosoft Learn▸Snowflake Cortex Agents now continue by default when named tools are inaccessible, emitting warnings instead of failing the runSnowflake documentation▸Databricks Genie One can use group memberships to tailor answers, while Unity Catalog remains the access-control boundaryDatabricks documentation▸Fabric data agents can query Power BI models with Read alone; Build and workspace access are unnecessaryMicrosoft Learn▸Fabric data-agent Git configs expose column flags, but selecting a table still includes every columnMicrosoft Learn▸Google Data Agent Kit offers remote Spark kernels, but notebook exports can still move results into local Pandas or ArrowGoogle Cloud Documentation▸Cube says production analytics agents need explicit partial-result states, caller-filtered model search and durable artifactsCube▸Thinking Machines names Bridgewater behind ReViSQL-K2.6, citing 92.97% SC-16 accuracy at 15% of frontier-model costThinking Machines Lab▸AWS says a mismatched data/tool/prompt release cut its Field Sales agent pass rate from 78% to 38% in pre-productionAWS Artificial Intelligence Blog▸NL2SQL Multi-Agent ships evaluation artifacts across BIRD, CSpider, Archer and KDD DataSpace—but no software licenseGitHub
nl2sql.ai
newsEnterprise release

SAP’s BTP administration agent inherits the operator’s identity—not a superuser token

A new remote MCP server lets compatible assistants inspect, provision and manage SAP BTP resources while remaining bound to the signed-in user’s existing permissions.

Assistant-to-BTP access diagram with identity-limited admin paths.
AI-generated diagram
By The News Desk· Aug 31, 2026the quick take — two AI hosts, this story only

SAP has made its MCP server for SAP Business Technology Platform administration publicly available as a remote service. The release gives compatible AI clients a natural-language route into BTP account administration without asking operators to host a proxy application or compile server code. SAP positions it as a way to reduce the chain of cockpit navigation and CLI calls needed for routine discovery, auditing and provisioning tasks. SAP’s release post

The important boundary is identity

The useful design choice is not that an assistant can call infrastructure APIs. It is that SAP says authentication uses the authorization-code flow through its default identity provider and propagates the signed-in user’s principal. The MCP server therefore operates with that person’s existing IAM policies and role collections rather than receiving a broader standing credential. In SAP’s examples, the same interface can check entitlements, audit a user’s roles across production subaccounts, or create a QA subaccount patterned after staging—but only within the operator’s own authority. SAP’s release post

That boundary matters because an administrative agent may dynamically sequence several API calls from one instruction. The language model can choose the tools required to satisfy an intent, while BTP’s authorization system still decides which actions are permitted. It is a more defensible pattern than handing an agent an all-powerful service credential and relying on prompt instructions to limit its behavior. SAP’s release post

One endpoint, four domains

SAP’s documentation says the server aggregates four administration domains—accounts, security, services and connectivity—behind one endpoint. Compatible clients discover the available operations and select tools based on the request; administrators do not configure each operation individually. SAP names Claude Code, GitHub Copilot in VS Code and OpenCode as examples of compatible clients, while saying any MCP-standard client can connect. SAP Help Portal

The service also handles regional routing after a single connection, according to SAP. That gives an operator one conversational control surface across BTP regions without juggling regional endpoints. The public release post supplies a remote MCP URL and client ID, while directing administrators to the Help Portal for current connection parameters and supported clients. SAP’s release post

What teams should test

Before treating the interface as an operational shortcut, teams should test the permission boundary with deliberately over-scoped requests: ask a low-privilege user’s agent to inspect an unauthorized subaccount, assign a forbidden role and provision an unapproved entitlement. The key acceptance criterion is not whether the model refuses politely; it is whether the platform denies the underlying tool calls. SAP’s principal-propagation design gives teams a concrete control to verify, while the public endpoint removes the deployment work that often obscures that test. SAP’s release post

sources

Filed by The News Desk. Corrections: desk@nl2sql.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk