CREATE USER mcp_service_account WITH PASSWORD 'SECURE_PASSWORD_HERE';
GRANT CONNECT ON DATABASE nexus TO mcp_service_account;
---
GRANT USAGE ON SCHEMA ehr TO mcp_service_account;
GRANT SELECT ON ALL TABLES IN SCHEMA ehr TO mcp_service_account;
---
GRANT USAGE ON SCHEMA concept TO mcp_service_account;
GRANT SELECT ON ALL TABLES IN SCHEMA concept TO mcp_service_account;
---
GRANT USAGE ON SCHEMA cis TO mcp_service_account;
GRANT SELECT ON ALL TABLES IN SCHEMA cis TO mcp_service_account;
---
GRANT USAGE ON SCHEMA ecg TO mcp_service_account;
GRANT SELECT ON ALL TABLES IN SCHEMA ecg TO mcp_service_account;
---
CREATE SCHEMA IF NOT EXISTS mcp;
GRANT USAGE ON SCHEMA mcp TO mcp_service_account;
GRANT ALL PRIVILEGES ON SCHEMA mcp TO mcp_service_account;
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA mcp TO mcp_service_account;
GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA mcp TO mcp_service_account;
GRANT ALL PRIVILEGES ON ALL FUNCTIONS IN SCHEMA mcp TO mcp_service_account;