OCI Managed MCP Service for Oracle AI Database OCI Database Tools — Native MCP Server Kris Rice / Jeff Smith Oracle AI Database Product Management 1 Copyright © 2026, Oracle and/or its affiliates 

2 Copyright © 2026, Oracle and/or its affiliates OCI Database Tools MCP Server Ask your Oracle AI Database anything — governed, secured, and free to deploy. Limited Availability What is it? A fully managed, HTTPS-native MCP endpoint built into the OCI Database Tools Service. No servers to provision, no patching, full Oracle Premier Support — business users can query their Oracle AI Database in plain language through any MCP-compatible AI client. Supports both validated named SQL Reports for governed repeatable queries and NL2SQL ad hoc SQL for agent-driven open-ended questions. Enterprise Security OCI IAM handles all auth via OAuth2. Federate existing Azure Entra ID, Okta, or Active Directory identities. Application roles control exactly who can run what — down to named reports only. Easy to Deploy Enable it in the OCI Console. No new infrastructure. Built on the existing DBTools Connection object your team already uses. Pay only for the database compute you consume. Works Everywhere Autonomous AI Database, Base Database, Exadata Cloud Service, and Oracle AI Database on AWS, Azure, and Google Cloud. One MCP Server, every Oracle AI Database in your estate. Key use cases: NL2SQL for business users Finance & ops reporting Sales & CS analytics DevOps & CI/CD 

3 Copyright © 2026, Oracle and/or its affiliates “The Model Context Protocol has become AI’s lingua franca. Oracle was one of the first movers delivering a single user implementation aimed at developers accessible via SQLcl. Now, Oracle is going enterprise with an OCI-based managed MCP service intended for business users. It uses OCI and Oracle AI Database role- based access controls, it’s easy to deploy, works with any Oracle AI Database service anywhere, and it’s zero cost. With this announcement, Oracle is making it very attractive for organizations to use AI to run their business and achieve Enterprise Acceleration.” Holger Mueller, Vice President and Principal Analyst Constellation Research 

The business user’s reality Valuable data, locked behind a skills wall 4 Copyright © 2026, Oracle and/or its affiliates The Sales Analyst "I need to know which accounts are at risk this quarter — but the report I need takes 3 days to get from IT." The Support Manager "I can see our ticket backlog, but I can't slice it by product version without writing SQL — which I don't know." The Finance Lead "Month-end close means chasing five different people for five different extracts from the same database." The data exists · The need is real · Expertise is the barrier 

Demo #1: Who are my top 10 loyalty program members? The agent identifies the appropriate report from our MCP Server. 5 Copyright © 2026, Oracle and/or its affiliates Don’t run or request SQL, simply tell the agent what you want to know. 

A report is utilized, no NL2SQL required Reports can be parameterized to service broad range of questions and ranges of data. 6 Copyright © 2026, Oracle and/or its affiliates Agent requests to run the report. 

A reliable answer is supplied The SQL has already been written, and now it can be reused Consistent results Less agent ‘thinking’, work, fewer MCP calls, predictable database workload 7 Copyright © 2026, Oracle and/or its affiliates 

8 Copyright © 2026, Oracle and/or its affiliates Workflow 

Demo #2: Tell me about program members who prefer email The SQL behind a known, reliable report adds valuable context, allowing the LLM to get to the right answer, faster. 9 Copyright © 2026, Oracle and/or its affiliates Access to the SQL behind a report can be shared with the agent depending on the user’s roles. 

LLM one-shots the SQL necessary to answer the question! The MCP Server supports a toolset for running ad hoc SQL/PLSQL. 10 Copyright © 2026, Oracle and/or its affiliates 

Reports inform data structure, no exploration required 11 Copyright © 2026, Oracle and/or its affiliates WITHOUT report SQL access WITH get_report_sql (Power User) User asks a business question e.g. 'who prefers email? group by program' Agent: explore schema Schema exploration - list tables, read views… Agent: attempt SQL guesses joins, column names — may be wrong Execute → wrong result / error ORA-00904, bad logic, re-iterate… Correct result — eventually 3–6 extra roundtrips · high token cost User asks a business question same question — same starting point list_reports → find relevant report discovers Customer Contact Readiness (1 call) get_report_sql → read the SQL sees joins, JSON_VALUE, filter logic instantly Adapt & execute_sql → correct result adds GROUP BY, filters for email=true — done (1 call) VS ~6–8 tool calls · High token cost · Risk of wrong answer 3 tool calls · 35–55% token reduction · Better answer 

Demo #3: Tell me about our loyalty programs. 12 Copyright © 2026, Oracle and/or its affiliates LLM generates SQL, agent submits to our MCP Server to be executed. The agent identifies the appropriate Report from our MCP Server. 

Queries generated, executed via MCP, agent summarizes 13 Copyright © 2026, Oracle and/or its affiliates 

Recap From developer tool to enterprise-ready platform 14 Copyright © 2026, Oracle and/or its affiliates 1 July 2025 SQLcl MCP Server debuts — developers & DBAs chat with Oracle AI Database via AI clients like Claude Desktop 2 Great Reception Rapid adoption. Clear signal: users love natural language access to their data 3 Enterprise Delivery/Evolution Local / STDIO isn't suited for enterprise teams — analysts and support staff need a secured, cloud- native solution 4 Today OCI DBTools MCP Server — HTTPS, OCI Auth, multi- tenant, role-controlled. Built for the whole organization. 1,000,000+ installs 

OCI Managed MCP Service for Oracle AI Database A fully managed, HTTPS-native MCP endpoint built into Oracle Cloud Infrastructure (OCI) — no servers to run, no local installs, nothing to patch. Copyright © 2026, Oracle and/or its affiliates 

Architecture in plain English 16 Copyright © 2026, Oracle and/or its affiliates Business User Asks in plain English via any MCP- compatible AI client OCI DBTools MCP Server HTTPS · OAuth2 · OCI IAM MCP Toolset Run SQL List & run Reports Oracle AI Database Any supported Oracle AI Database service User’s SSO enables access to cloud resources based on group membership 

It All Starts with a Connection The OCI Database Tools Connection is the foundation everything else is built on What it is • A managed, secure link between OCI and your Oracle AI Database • Stores credentials, wallet, and endpoint centrally — not on each user's machine • One connection can back multiple MCP Servers • Defined once by an administrator, consumed by everyone Why it matters for security • The database user tied to the connection is the ultimate security backstop • Oracle AI Database security rules apply in full — roles, object grants, VPD, all of it • The MCP layer inherits those controls automatically — no duplication needed • A read-only database user means read-only AI access. Full stop. 17 Copyright © 2026, Oracle and/or its affiliates OCI controls who can reach the MCP layer – Oracle AI Database controls what they can see 

MCP Server Toolsets 18 Copyright © 2026, Oracle and/or its affiliates Built-in SQL tools Ad-hoc, NL2SQL focused, allows an Agent to execute any Oracle SQL or PL/SQL code it has generated. • sql_run • request_status • schema_information Reporting tools Curated, parameterized queries published as governed, callable tools. • dbtools_list_reports • dbtools_execute_report • dbtools_get_report_sql Available reports controlled by authenticated user’s Group membership. Custom Tool Predefined, parameterized SQL or PL/SQL scripts to implement your database operations. • YourToolName Want your Agent to be able to cancel any query, reset a user’s database password, or run your favorite script to diagnose performance problems – build your own tool! 

Built for Developers, DBAs & DevOps Too​ The same MCP Server that serves business users also gives technical teams an AI-powered assistant for any database task​ 19 Copyright © 2026, Oracle and/or its affiliates Using run_sql tool or custom toolsets, an AI agent connected to your Oracle Database can assist with the full range of technical database work — no context switching, no ticket queue, just answers and actions grounded in your actual schema and data. Security Reviews Audit priv grants, flag users with excessive roles, find SQL injection vulnerabilities, or surface objects accessible outside intended areas. PL/SQL Debugging Trace logic errors, diagnose exceptions, suggest corrected code with explanations and unit tests. Index Management Identify missing indexes on slow queries, detect redundancies, provide recommendations with ready-to-run INDEX DDLs. Performance Diagnostics DevOps & CI/CD Trace logic errors, diagnose exceptions, suggest corrected code with explanations and unit tests. Data Modeling Review schema design, suggest normalization improvements, evolve schema based on new feature requirements. Analyze AWR reports, suggest SQL optimizations, find blocking wait events, figure out what is ‘SLOW.’ 

Example: Index Management​ Validate existing indexing, suggest and test optimizations​ 20 Copyright © 2026, Oracle and/or its affiliates LLM-generated queries passed to the database via our MCP Server's dbtools_execute_sql tool. 

Enterprise Security & Access Control OCI Identity governs everything. Your existing users, groups, and policies — extended to AI access. Copyright © 2026, Oracle and/or its affiliates 

One Identity, End to End No new credential silos — OCI Identity Management handles it all How authentication works • Users authenticate via OAuth2 — the industry standard • OCI supports federated identities — bring Azure Entra ID, Okta, or Active Directory users directly into OCI • No separate MCP credentials to manage or rotate • SSO works out of the box — users sign in once, and grant access for their client Access is layered & additive 22 Copyright © 2026, Oracle and/or its affiliates IAM Group → which DBTools Connection (database) a user can reach Group → which MCP Server they can connect to Group → which Toolsets & Reports are available to them 

Three Out-of-the-Box roles, defined via Domain Groups Least-privilege access, ready on day one 23 Copyright © 2026, Oracle and/or its affiliates Group Who It's For Named Reports Ad Hoc SQL Manage Toolsets MCP_User Business analysts, support staff, managers — — MCP_Operator Data engineers, power users, DevOps — MCP_Administrator Platform owners, DBA leads Every action is audited. Every query is logged. Your security team will sleep soundly. 

Works Across Your Oracle Cloud Estate Not just Autonomous — every Oracle Database service you already run in the cloud 24 Copyright © 2026, Oracle and/or its affiliates OCI Services Autonomous AI Database Serverless & Dedicated · Base Database Service · Exadata Cloud Service · Oracle AI Database instances running on compute, container services, or OKE Oracle @ Hyperscalers Oracle AI Database on partner clouds — same OCI DBTools connection, same MCP experience Oracle @ AWS Oracle @ Azure Oracle @ Google Cloud 

What Does the Managed MCP Service Cost? 25 Copyright © 2026, Oracle and/or its affiliates $0 The MCP Server, toolsets, and reports are included at no additional charge as part of no- cost OCI Database Tools Service. No new line item OCI DBTools MCP is free on top of any Oracle AI Database service you already have. No licensing uplift. No per-seat fee. The only real cost: your database compute Every query runs on your database — CPU and ECPU consumption is billed as normal, exactly as if a developer had run the same query directly. Governed with named reports and role controls. Your agent and LLMs may have associated costs and fees. 

Choose your MCP Server (HTTPS or STDIO) Everything SQLcl MCP offered — now cloud-native and team-scale SQLcl MCP (local) • STDIO — local machine only • Anyone on the machine can connect • ad hoc SQL tool, SQLcl commands • Great for single-developer workflows OCI DBTools MCP (cloud) • HTTPS — connect from anywhere • OCI IAM controls every connection • ad hoc SQL, governed reports, and custom tools • Team-scale, audited, CI/CD friendly 26 Copyright © 2026, Oracle and/or its affiliates Agentic pipelines NL2SQL prototyping Automated reporting CI/CD data validation 

Choose which tools — Reports only, or include ad hoc SQL 2. Define an MCP Server & Toolset Curate the queries your business users need most 3. Publish SQL Reports Point it at any Oracle Database you already have 1. Create a DBTools Connection Grant users access — they log in with the identity they already have 4. Assign IAM Groups Getting started Available today in Limited Availability · Contact your Oracle account team to join the program Four steps from zero to your first business user conversation Copyright © 2026, Oracle and/or its affiliates 27 

28 Copyright © 2026, Oracle and/or its affiliates OCI Database Tools MCP Server Ask your Oracle AI Database anything — governed, secured, and free to deploy. Limited Availability Enterprise Security OCI IAM handles all auth via OAuth2. Federate existing Azure Entra ID, Okta, or Active Directory identities. Application roles control exactly who can run what — down to named reports only. Easy to Deploy Enable it in the OCI Console. No new infrastructure. Built on the existing DBTools Connection object your team already uses. Pay only for the database compute you consume. Works Everywhere Autonomous AI Database, Base Database, Exadata Cloud Service, and Oracle AI Database on AWS, Azure, and Google Cloud. One MCP Server, every Oracle AI Database in your estate. 

No content