Role-based MCP servers govern data access
Datadog implemented role-based MCP servers (e.g., one for SDRs) to control what data AI agents can access by role, replacing overly broad permissions.
Where this was said
AI Flattens Data Permissions: The Internal SQL Incident
At 5:35 · chapter starts 3:50
With broad AI adoption came an unexpected data governance reckoning. Escobar describes a business intelligence tool Datadog built internally that started surfacing data in ways that raised eyebrows. The culprit wasn't a permissions breach in the traditional sense — the data was always technically accessible to someone who knew the right SQL. But AI changed who 'someone who knows SQL' includes. A commercial sales rep, with no SQL expertise, prompted the AI to figure out the query and pulled enterprise team performance data that was supposed to stay siloed [1] — Emilio Escobar "AI doesn't need to hack your permissions system — it just needs to be prompted. A Datadog commercial sales rep used an internal AI tool to …" 04:40 . It wasn't a catastrophic leak, but it was a clear signal: the assumption that data permissioning would serve as a practical access barrier no longer holds when AI can generate any query on demand. Escobar frames it directly: 'AI is going to find a way to get it. All you have to do is prompt it.'
~98% company-wide AI adoption rate
Datadog achieved approximately 98% employee adoption of some form of AI tool, spanning coding agents to general-purpose LLMs.
AI Flattens Data Permissions: The SQL Incident
AI doesn't need to hack your permissions system — it just needs to be prompted. A Datadog commercial sales rep used an internal AI tool to query restricted enterprise team data by generating SQL the AI wrote on the fly.
AI found cross-team sales data via SQL agent
An internal AI business intelligence tool at Datadog allowed a commercial sales rep to query enterprise-team performance data via SQL, exposing gaps in permissioning assumptions.
Role-Based MCP Servers: Datadog's Solution to Agent Data Governance
Rather than locking down data broadly, Datadog built role-based MCP servers that give AI agents access to exactly the data their user's role permits. Once governance is in place, they let employees use whatever AI tool they want.
Similar snapshots
50 free tools built total
Bhanu and his team built approximately 50 free tools to attract search traffic, each linked back to SiteGPT.
New tool built in under 5 minutes
With AI coding tools like Cursor, Bhanu can now create a new free marketing tool in less than 5 minutes by referencing existing tools.
KD filter < 10 for rankable keywords
Bhanu filters Ahrefs keyword results to show only those with a keyword difficulty below 10, making them realistic ranking targets for any decent website.
Minimum 1,000 monthly search volume
Bhanu sets a minimum search volume of 1,000 monthly searches when selecting keywords to target with free tools.
20 downloads/day at launch
PropGPT averaged 20 downloads per day right after launching on the App Store through influencer marketing.
4 months of rebuilding with no marketing
Eyal and Yali shut down all marketing and spent 4 months completely rebuilding PropGPT from scratch.
Over 40,000 downloads total
PropGPT has accumulated over 40,000 total downloads since launch.
LLM costs only $20/month
PropGPT's large language model (AI) operating costs are just $20 per month, and the cost is continually falling.
Ad monetization for games
Ad-based monetization works well for game apps where users spend extended time in-session, as seen with Grid and Wordle.
