• ACCESS
  • REVOCATION
  • AUDIT
  • HUMAN

How to rotate database security tokens with your AI

Connect Turso to your AI client once. From then on, your agent handles the heavy lifting of managing JWT access for your edge databases.

Ask AI about this page

Short answer

How can I rotate my Turso database tokens using AI?

Your AI uses the Turso MCP to create new JWT tokens or revoke old ones immediately. This allows you to refresh credentials or kill compromised access without leaving your chat interface. You get full control over your edge database security through natural language commands.

Security outcomes

What you get

The results of letting your AI manage your Turso credentials.

ACCESS

New JWT tokens

The AI generates fresh connection strings for your edge data. You get immediate access to your Turso databases using new credentials.

REVOCATION

Kill old tokens

If a token is leaked, your AI pulls the plug. It invalidates specific JWTs to protect your data instantly.

AUDIT

Token visibility

Your agent pulls a list of current active tokens. You can see exactly what access is currently live in your Turso instance.

HUMAN

Manual oversight

The AI won't delete your entire database or change core infrastructure settings. You stay in control of the actual data and schema.

The workflow

What your AI does when a security event occurs.

Your AI acts as the bridge between your security requirements and the Turso API.

  1. Check current access

    The AI looks up all existing JWTs to see what is currently active in your Turso environment.

    list_database_tokens

  2. Generate new credentials

    When you need fresh access, the AI creates a new JWT for your application or user.

    create_database_token

  3. Invalidate old keys

    To secure the edge, the AI swaps out old tokens for the new ones you just created.

    rotate_database_tokens

  4. Verify rotation

    The AI checks the updated list to ensure the old tokens are gone and the new ones work.

    list_database_tokens

Try it

Copy these to start.

Use these prompts to trigger security actions in your chat.

Starting points

These are starting points. Swap out the database names or token IDs with your actual Turso details.

Turso Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_auXgf153NbgeNT8u85XWHaGvlwZ8G20GEzWf2zUa/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Turso capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "turso-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_auXgf153NbgeNT8u85XWHaGvlwZ8G20GEzWf2zUa/mcp"
    }
  }
}
Copy into chat04

  • List all the current database tokens for my production database.

  • Create a new JWT token for the edge-api database.

  • Rotate the tokens for my user-data database to clear out old access.

  • Show me all active tokens so I can find the one to revoke.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Turso once, then ask.

You only need to link your Turso account one time. Your credentials stay encrypted, and you can start managing tokens immediately.

Connect Turso to your AI

FAQ

How this task behaves

  • 01

    Can the AI delete my actual database tables?

    No. The AI only manages JWT connection tokens. It cannot modify your data, schemas, or tables.

  • 02

    Will the AI automatically rotate tokens every day?

    No. The AI only performs rotations or creations when you specifically ask it to do so in your chat.

  • 03

    Can I use this to create user passwords?

    No. This MCP is strictly for managing Turso JWT connection tokens, not user authentication or passwords.

  • 04

    Does the AI see my database contents?

    No. The tools provided only allow the AI to manage the security tokens used to access the database, not to read the rows inside it.

  • 05

    How do I know if a rotation worked?

    You can ask the AI to list the current tokens after a rotation to verify the old ones are gone.

  • More questions about Turso? The Connector page answers them. See everything the Turso Connector can do

Connect Turso to Claude, Cursor, ChatGPT & more