¶Connections

Connections are managed in the left panel. Each profile is stored locally; its password is kept in the OS keychain and never written to disk in cleartext.

¶Creating a connection

Click ➕ and complete the dialog:

• Name — a friendly label shown in the navigator and status bar.
• Host / Port — defaults to 127.0.0.1:3307.
• User / Password — the password is saved to the keychain on connect.
• Default database — optional database to select on connect.
• Environment — Dev, Staging or Prod. Sets the accent colour and, for production, extra safety rails.
• Read-only — the connection refuses any write or DDL statement.
• Require TLS — enforce an encrypted connection (otherwise TLS is used opportunistically when the server offers it).

Test verifies connectivity and reports clear diagnostics (authentication, network, unknown database, TLS). Connect opens and saves the profile.

¶Environments & safety rails

The active environment is shown in the toolbar and status bar:

• Prod draws a red frame around the window.
• On production connections, write/DDL statements require an explicit confirmation before running.
• Read-only connections block writes entirely, regardless of edition.

!!! warning "The client never widens server permissions" These rails only ever narrow what you can do. The server's own privileges always apply on top.

¶Local vs remote

• Local/loopback hosts (127.0.0.1, localhost, …) are available on the Free edition.
• Remote hosts require Pro or Premium — see Editions.

¶Managing connections

• Select a connection to connect and load its databases.
• Hover a connection and click ✕ to remove it (also deletes its keychain secret).
• Switch quickly with the command palette (⌘/Ctrl + K → “Switch to …”).