The Short Answer
PGBot is a free, open-source Go tool giving AI agents native PostgreSQL intelligence — schema reasoning and query optimization with no human translating between model and database. It matters because once agents reason directly over the system of record, the data layer becomes part of the reasoning surface, and on ibl.ai you own all the code and the data, model-agnostic and with no per-seat pricing.
The capability is the headline. The governance consequence is the part worth planning for.
What does PGBot actually do?
PGBot gives an agent direct PostgreSQL competence: inspecting schema structure, reasoning about relationships and indexes, and optimizing queries — rather than emitting SQL strings a human then validates.
It is written in Go, distributed as free and open source, which matters for adoption in regulated environments. An open-source tool in the data path can be read, audited, and run inside a perimeter where sending schema details to a hosted service would not clear review.
How is this different from text-to-SQL?
Text-to-SQL takes a natural-language question plus a list of tables and guesses a query. It works in demos and degrades badly on production schemas, because the model only knows what the prompt described.
Real schemas defeat that approach. Thirty years of naming drift, soft-delete columns, denormalized reporting tables, and three fields that plausibly mean "active" are not recoverable from table names alone.
PostgreSQL has been developed under that name since 1996. A schema carrying decades of history accumulates exactly the ambiguity a pasted table list cannot resolve.
Schema reasoning is a different operation. The agent inspects the database's own structure — constraints, foreign keys, indexes, cardinality, execution plans — and works from what the database reports rather than what a prompt asserted.
The distinction is between guessing from a description and querying the system for ground truth.
Why does this matter for enterprise AI specifically?
Because it closes the gap that has kept most enterprise AI shallow.
An agent that reads documents does retrieval. An agent that can reason over the system of record can answer questions the documents never contained — what actually happened, to which account, in what sequence.
That is the difference between a system that summarizes what someone already wrote down and one that can work from the operational record. Most enterprise value sits in the second category, which is why the data layer has been the bottleneck rather than the model.
It also sharpens a distinction covered in vector databases versus knowledge graphs: embeddings find passages that resemble a question, while structured reasoning answers what is true about a specific entity. Agentic database access is firmly the second.
What changes about governance when agents query directly?
The blast radius does.
A retrieval agent reads an index someone curated.
An agent with schema-level database access reasons over the live system of record — which means read scope, row-level security, query cost, and audit logging stop being database administration concerns and become AI governance concerns.
Four questions that were previously storage decisions become deployment decisions:
- Which rows can this agent see, under whose identity?
- What is logged when an agent runs a query — the SQL, the plan, the rows returned?
- What stops an expensive query from taking production down?
- Which jurisdiction does the reasoning happen in?
None of these are answerable by the tool. They are answered by where the database and the agent runtime sit — which is the actual decision.
Does an open-source tool solve the ownership problem?
Partly, and it is worth being exact about the limit.
An open-source tool in the data path is auditable and self-hostable — genuinely better than a proprietary connector shipping schema metadata to a vendor. That is real.
But the tool is one component. If the agent runtime calling it is a managed service, and the database is a vendor-managed instance, then an open-source query layer sits between two things you do not control. The audit stops at the boundaries.
Ownership is a property of the whole path: the runtime, the connectors, the models, and the data. A single open-source link improves one segment of a chain whose weakest point still decides the outcome.
Where ibl.ai fits
ibl.ai is the agentic AI platform where you own all the code and the data.
You self-host the entire stack inside your own perimeter, run it model-agnostic across any LLM and switch anytime, and pay by usage with no per-seat pricing — so you can deploy anywhere: your cloud, on-premise, GovCloud, or fully air-gapped.
Connectors reach systems of record over the Model Context Protocol, reading data in place rather than extracting it into another store — the pattern described in why MCP is the data layer for AI agents.
Agents reason over the live record, and the audit trail stays on your side of the boundary.
1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University.