Twitter/X

On 2026-07-21 PrefectIO reports a data team put an MCP server in front of their…

2026-07-21 · 19:28 UTC ·@PrefectIO ·1 min read

Brief

PrefectIO recounts a 2026-07-21 incident where a data team put an MCP server in front of their warehouse and told users to ask an agent; within a week the agent ran SELECT * in BigQuery, took the warehouse down, and generated a huge bill. The piece argues agentic orchestration must govern what agents can touch and when; Jeremiah Lowin and Demetrios Brinkmann discussed it on the Agentic Conversations podcast.

Why it matters

On 2026-07-21 PrefectIO reports a data team put an MCP server in front of their warehouse and told everyone to 'skip the query requests' and ask an agent; within one week the agent executed SELECT * in BigQuery, took the warehouse down, and ran up a huge bill.

Key details

  • PrefectIO states the agent wasn't broken but lacked cost-awareness and had raw access to a billed system; they argue agentic orchestration — governing what workflows can touch and when — is the solution, a point made by CEO/FastMCP creator Jeremiah Lowin and Demetrios Brinkmann on the Agentic Conversations podcast.
Source evidence

A data team put an MCP server in front of their warehouse and told everyone: skip the query requests, just ask your agent.

"They did that for a week, and then the agent took down the warehouse and ran up a huge bill 'cause it did SELECT * in BigQuery."

The agent wasn't broken. It just had no idea what costs money. It was had raw access to a system with a real bill attached. That's the problem agentic orchestration solves: the agent decides how the work gets done, the workflow governs what it can touch and when.

Our CEO and FastMCP Creator Jeremiah Lowin @jlowin with Demetrios Brinkmann @Dpbrinkm on the Agentic Conversations Podcast by the Agentic AI Foundation @AgenticAIFdn.

Video