For healthcare teams: we're taking on a few design partners. Learn more →
Open-source MCP server for PostgresStar on GitHub ›

Lock rows for AI agents.

It sits between your AI agents and Postgres. The database decides what each agent can see, sensitive values are masked, and every write waits for a human.

Agent askedLokra
Who's booked today?12 masked
Read Noah's notesRefused
Cancel Noah's Monday appointmentNeeds approval
Drop the patients tableBlocked

Why now

40%of enterprise apps predicted to have AI agents built in by the end of 2026, up from under 5%Gartner, Aug 2025 ↗
9 secfor an AI agent to wipe a production database and its backupsACS, Apr 2026 ↗
9.6critical score of a read-only bypass in AWS's database MCP serverGitHub advisory, Sep 2026 ↗
56%of security leaders can't count the AI and machine identities they runFelicis, 2026 ↗

How it works

One hop between your agents and your data.

AgentClaude Codeor any MCP client
Lokra
  1. 1Verify identity
  2. 2Check SQL
  3. 3Human approvalwrites
  4. 4Run as agent's role
  5. 5Mask results
  6. 6Sign ledger
PostgresOwn role per agentRow-level security

Every request passes through six checks. The database itself has the final say.

Deployment

Run it your way.

Open source · Free

Self-hosted

  • Runs inside your own network
  • Patient data never leaves your servers
  • Apache-2.0, no usage limits
$ docker compose up -d
$ lokra provision
Quick start →
Coming soon

Lokra Cloud

  • Policy editor and Slack approvals
  • Long-term audit retention
  • SSO and team roles

For healthcare teams

Built for patient data.

Health has been Australia's most-breached sector in every OAIC report since 2018. Source ↗

Australian identifiers

Medicare and IHI numbers masked by default, even in free text.

Stays in your region

Self-host in Australia. Nothing is sent to us.

Audit-ready ledger

Every agent action signed and verifiable with one command.

A human signs off

Writes to clinical systems always wait for approval.

Working with patient data? We're taking on a few design partners.

Talk to us