DMOps.ai

Appearance

Edge Connector ​

The Edge Connector lets agents query databases and systems that live inside your private network — behind a firewall, with no public internet access.

How it works ​

[DMOps Agent] → [DMOps API] → [Edge Connector (your network)] → [On-premise SQL / system]

The Edge Connector is a lightweight .NET 8 service you run inside your network. It registers with the DMOps API via an outbound HTTPS connection (no inbound firewall rules needed) and relays agent queries to your internal databases.

Supported backends ​

  • Microsoft SQL Server (2012 or later, via ADO.NET)
  • More backends on the roadmap

Installing the Edge Connector ​

Prerequisites ​

  • .NET 8 Runtime on a Windows or Linux server inside your network with access to the target database
  • Outbound HTTPS access to your DMOps tenant URL
  • A SQL login with db_datareader permissions on the target database (read-only recommended)

Download ​

Download the latest DmAcp.EdgeConnector release from your Dynamics Mobile partner portal, or obtain it from the src/connectors/edge-connector/ directory of the ACP repository.

Configuration ​

Set the following environment variables (or use appsettings.json):

bash
DMOPS_TENANT_URL=https://acme.app.dmops.ai
DMOPS_API_KEY=your_api_key
CONNECTOR_ID=my-sql-server
MSSQL_CONNECTION_STRING="Server=192.168.1.10;Database=ERP;User Id=sa;Password=...;TrustServerCertificate=True"
ALLOWED_SCHEMAS=dbo,reporting        # comma-separated list

Running on Windows ​

powershell
dotnet DmAcp.EdgeConnector.dll

Or install as a Windows Service:

powershell
sc.exe create DMOpsEdgeConnector binpath="dotnet C:\dmops\DmAcp.EdgeConnector.dll"
sc.exe start DMOpsEdgeConnector

Running on Linux (systemd) ​

ini
# /etc/systemd/system/dmops-edge-connector.service
[Unit]
Description=DMOps Edge Connector

[Service]
WorkingDirectory=/opt/dmops
ExecStart=/usr/bin/dotnet DmAcp.EdgeConnector.dll
Restart=always
EnvironmentFile=/etc/dmops/edge-connector.env

[Install]
WantedBy=multi-user.target
bash
systemctl enable dmops-edge-connector
systemctl start dmops-edge-connector

Granting agents access to the edge connector ​

  1. In DMOps.ai, go to Settings → Integrations → MSSQL Edge Connector.
  2. Your connector appears in the list once it connects.
  3. Enable it and grant the mssql_read or mssql_write tool to the agents that need it.

Tool separation ​

ToolWhat it does
mssql_readExecutes a single SELECT statement. Read-only — no data modifications possible.
mssql_writeCalls a stored procedure by name with named parameters. Requires human approval.

WARNING

mssql_write calls always require admin approval before execution. Agents cannot bypass this approval gate. Use mssql_read for all read-only queries.

Security notes ​

  • All traffic between the connector and DMOps is TLS encrypted
  • The connector makes only outbound connections — no inbound ports are opened
  • mssql_read is enforced at the connector level — the SQL statement is validated server-side before execution
  • mssql_write is restricted to stored procedure calls only (no ad-hoc SQL)
  • Restrict ALLOWED_SCHEMAS to the minimum schemas agents need
  • Use a dedicated SQL login with the minimum required permissions