You fix data by hand in a customer's SQL Server database, with no safety net.
Claude on your customer's database, with preview and undo.
An add-on for Golem, for SQL Server. Claude writes whatever SQL is needed, like a technician working by hand, and GolemDb puts a net under it: it shows every change before making it, keeps what was there, can undo it and records everything in an audit log.
- Technicians who already use Golem
- Software houses, with one license for all their customers
- SQL Server 2008 R2 or later
Without a license it starts in evaluation, with no expiry: it looks and previews, and the three tools that change the database ask for a license. Applying changes takes both the GolemDb and the Golem license.
Features
A real preview
db_preview runs the change inside a transaction, shows the rows before and after, and rolls it back. What you see is what will happen when you apply it.
Backup and undo
db_apply keeps the rows it touches before changing them, and db_undo puts them back with the same ID. The backup lasts seven days, or until you confirm the change.
Protection levels
Every statement is classified before it runs. What cannot be undone (DDL, procedures, a TRUNCATE) needs your explicit acknowledgment before it is applied.
Audit log with the holder
Every call leaves a line in golemdb-audit.log, on the customer's server, without the connection string and with the name of the license holder.
A Golem child
It is declared with one entry in golem.mcp.json. Golem provides the tunnel, the token, the certificate and its own audit log; GolemDb provides the data access.
Nothing to install
golemdb.exe is a single file that carries its own runtime. The connection string is stored encrypted with DPAPI and Claude never sees it.
How it works
- 1Copy the exe to the server
golemdb.exe in a folder on the customer's server, next to the Golem agent. golemdb connection add stores the connection string encrypted, and connection test checks that it gets through.
- 2One entry in golem.mcp.json
You declare golemdb serve as a Golem child. When you connect, Claude sees its eight tools: five that look and three that change the database.
- 3Ask in your own words
“Delete the delivery notes with a negative amount and their lines, and show me first what you are going to do.” Claude looks, shows you the preview, applies it when you say so and can undo it.
Download GolemDb
No account and no license: it starts in evaluation. Put it next to the Golem agent on the customer's server, for example in C:\Golem\GolemDb\.
GolemDb is digitally signed
Since 1.0.0, golemdb.exe carries a publisher signature in the name of Irwin Alfredo Rodriguez Gimenez, with a timestamp. To see it: right-click the file → Properties → Digital Signatures, or run Get-AuthenticodeSignature in PowerShell, which must say Valid.
- SmartScreen: the certificate is new and Windows may still warn for a while. If “Windows protected your PC” appears, click More info: it must say Publisher: Irwin Alfredo Rodriguez Gimenez. If it does, Run anyway; if it says “Unknown publisher”, that file is not ours: do not run it.
No account needed: without a license it runs in evaluation. A .zip with golemdb.exe, the manual and the changelog. GolemDb-1.0.0.zip · 36.1 MB
Before you install
GolemDb comes as a .zip. golemdb.exe is signed, but Windows marks what comes from the internet and, with a new certificate, may warn you when you launch it. Here is what you will see, how to continue, and how to check for yourself that the file you downloaded is exactly the one we published.
File downloaded from the internet, and SmartScreen
Windows marks the .zip as downloaded from the internet, and that mark passes on to every file you extract from it. If you launch golemdb.exe without unblocking first, SmartScreen appears (“Windows protected your PC”): the way out is two clicks, “More info” and “Run anyway”. To keep it from appearing, unblock the .zip before extracting it.
- Right-click the .zip → Properties.
- At the bottom, tick Unblock and confirm.
- Extract after unblocking: the other way round, the mark stays on every extracted file.
You can also do it from PowerShell: Unblock-File on the downloaded .zip.
If your antivirus stops it
Some antivirus products quarantine executables they rarely see. If that happens, add an exclusion for the folder where you keep golemdb.exe (C:\Golem\GolemDb\, say) and launch it again.
If the antivirus belongs to your company and you cannot change its rules, give the SHA-256 below to whoever administers it: that is what they need to clear the file.
Check what you downloaded
These are the details of the current version and the day it was published. The hash is computed on the file exactly as the portal serves it:
| File | Version | Published | Size | SHA-256 |
|---|---|---|---|---|
GolemDb-1.0.0.zip | 1.0.0 | 29 Sept 2026 | 36.1 MB | 70F74C8E57D2FF7253A01CB7616ACBDC52EB6F3A520A8598060E60EFDC3AA5D2 |
To check it, open PowerShell in your downloads folder and run:
Get-FileHash -Algorithm SHA256 "$HOME\Downloads\GolemDb-1.0.0.zip"If the value matches the table, the file is ours and intact. If it does not match, do not run it: download it again and, if it still does not match, write to soporte@irwinrodriguez.dev.
Hashes are measured again for every published version. If you downloaded an earlier version, its hash will not necessarily match this table.
Price
One license per holder, the software house, for the servers of all its customers. One-time payment with 12 months of new versions, then 29 € a year if you want to keep receiving them. Requires Golem.
Frequently asked questions
Do I need Golem?
What does it do without a license?
Why per holder?
Which database engines does it support?
Can Claude run anything?
Does it replace backups?
What happens when maintenance ends?
Where is the documentation?
Fix your customers' data with a net under you
Download it for free and try it in evaluation against a test database: the preview already shows what each change would do.
Buy now