agent-db-scan is a tool that analyzes what privileges a Postgres login possesses, including owned objects, group role memberships, public grants, and future default privileges. It helps users audit database access before sharing credentials with AI agents or other services, using read-only transactions and scanning only catalog metadata.