Using Claude with dbtrail

Once you've connected Claude to dbtrail, you can query your MySQL change history using natural language.

Example conversations

Finding deleted rows

You: Show me all rows deleted from the orders table in production in the last 24 hours.

Claude: I found 3 deleted rows in production.orders since yesterday:

order_id	customer	amount	deleted_at
1042	acme-corp	$299.00	2026-03-07 14:23:01
1043	widgets-inc	$150.50	2026-03-07 15:01:33
1044	acme-corp	$75.00	2026-03-07 16:45:12

Investigating changes

You: What changed in the users table for user_id 5678 this week?

Claude: I found 2 changes to user 5678 this week:

1. UPDATE on Mar 5 at 10:15 — email changed from old@example.com to new@example.com
2. UPDATE on Mar 7 at 09:30 — status changed from active to suspended

Finding the first event of the day

You: What is the oldest registered event that happened today on the production server?

Claude: The earliest event today was an INSERT into production.heartbeat at 2026-03-20 00:00:01 UTC — a routine heartbeat write from the replication monitor.

Finding the earliest delete in a time range

You: Show me the first row deleted from sessions after the deploy at 2pm yesterday.

Claude: The first DELETE in app.sessions after 2026-03-19 14:00 was at 14:03:22 UTC:

session_id	user_id	created_at	deleted_at
a8f3c9e1	2041	2026-03-19 09:15:00	2026-03-19 14:03:22

This was 3 minutes after the deploy — could be the new session cleanup job kicking in.

Generating recovery SQL

You: Generate SQL to recover the deleted order 1042.

Claude: Here's the recovery SQL (dry-run). Review carefully before executing:

SET autocommit = 0;
BEGIN;
INSERT INTO `production`.`orders` (`order_id`, `customer`, `amount`, `status`)
VALUES (1042, 'acme-corp', 299.00, 'active');
COMMIT;

Cloud-only examples

Counting events by table

You: How many INSERTs happened across all tables in the last hour?

Claude: Here's the INSERT activity in the last hour, broken down by table:

Schema	Table	Count
demo	metrics	12,440
demo	order_items	8,910
demo	audit_log	4,823
demo	orders	3,022
demo	customers	1,580

Total: 30,775 INSERTs across 5 tables in the last hour. The metrics table accounts for 40% of all INSERT volume.

Finding the busiest tables

You: Which table had the most DELETEs today?

Claude: I checked DELETE activity across all tables today. The session_tokens table had by far the most DELETEs — 45,230 — likely from automatic session cleanup. The next highest was temp_results with 2,100.

Tracking who changed a row first

You: Who was the first person to modify the pricing table in ecommerce since Monday?

Claude: Using forensic enrichment, the first change was an UPDATE at 2026-03-17 08:12:44 UTC by deploy_bot@10.0.3.22 (via mysql-connector-python). It changed the discount_pct column on product_id 891 from 0.10 to 0.15.

Tips for effective queries

1. Be specific about the server — if you have multiple servers, mention which one: "on the production-main server"
2. Use time ranges — "in the last hour", "since March 1st", "between 2pm and 3pm yesterday"
3. Filter by event type — "show me only DELETEs", "what was updated"
4. Reference tables explicitly — "in the orders table in the mydb schema"
5. Ask volume questions — "how many writes happened today?" or "which table is busiest?" — on dbtrail Cloud, Claude uses the efficient count_events tool (Cloud-only) instead of fetching individual rows
6. Ask for the first or oldest event — "what was the first INSERT today?", "show me the oldest delete since the deploy" — Claude retrieves the oldest matching events first without scanning through all results

What Claude can and cannot do

Rate limits