Run a bounded query
Open the selected database's query control. Choose its restricted database user, enter the password privately and supply one supported read-only SQL statement. The query is sent to POST /v1/databases/{id}/query, with bounded execution and result limits. The route envelope is 20 seconds and the agent's requested query maximum is 15 seconds; a timeout is not proof that the read completed or returned every result.
Use this tool for deliberate database work, not arbitrary host commands. User grants, account state and engine capability still apply. Password and SQL text are not included in durable operation history; do not attach application data or credentials to support reports. The bounded query interface does not authorize destructive SQL or arbitrary writes; use the application’s reviewed migration/data workflow for changes.
Import, export and database backups
The database workspace offers distinct import, export and backup operations at /v1/databases/{id}/import, /export and /backup. Select the actual operation and authorized user/source/destination offered by the installed form. Follow its durable task and inspect the generated result instead of assuming the browser receiving a request means the transfer completed. File/import bounds and account containment remain enforced.
Back up before an import that overwrites data. Test an export by restoring into an authorized disposable destination. A database dump is data/schema recovery, not a promise to restore all server identities, grants, password hashes, application binding secrets or external state.
Administrator remote access
Remote configuration is installation-level: read status at GET /v1/database-remote/{engine} with server:read, then use /preview and /configure with server:manage and fresh authentication. Review assigned listen address, allowed client CIDRs and the verified TLS certificate fingerprint. The server returns an impact preview; submit its reviewed contract instead of opening a listener manually.
Use the actual assigned address and narrowly scoped client networks. Confirm firewall and database policy independently from an external authorized client, including rejected clients and certificate verification. Do not use a public-anywhere CIDR as a troubleshooting shortcut. Customer Remote Database Access is explicitly unavailable; a Customer token cannot acquire server-management access.
Recovery and failure checks
On timeout or ambiguous import delivery, inspect database state before repeating the mutation; a query timeout requires checking the bounded read result. Stale revisions need reload and review. Missing TLS, unsupported engine or unavailable agent must remain a denial. Do not disable TLS verification or point customer tools at Panel metadata. Dedicated database repair and optimization are not provided by this checkpoint.