←back to thread

103 points nicktikhonov | 6 comments | | HN request time: 0.903s | source | bottom

SnapQL is an open-source desktop app (built with Electron) that lets you query your Postgres database using natural language. It’s schema-aware, so you don’t need to copy-paste your schema or write complex SQL by hand.

Everything runs locally — your OpenAI API key, your data, and your queries — so it's secure and private. Just connect your DB, describe what you want, and SnapQL writes and runs the SQL for you.

Show context
GarrickDrgn ◴[] No.44328059[source]
Am I misunderstanding something? How is this "Everything runs locally" if it's talking to OpenAI's APIs?
replies(4): >>44328354 #>>44328449 #>>44328475 #>>44328580 #
1. nicktikhonov ◴[] No.44328580[source]
What I meant was that it isn't a web app and I don't store your connection strings or query results. I'll make this more clear
replies(2): >>44328639 #>>44329251 #
2. omega3 ◴[] No.44328639[source]
You might not but openai does.
replies(2): >>44328748 #>>44328906 #
3. doctorpangloss ◴[] No.44328748[source]
API gateways could accept public keys instead of generating bearer tokens. Then the private key could reside in an HSM, and apps like this could give HSMs requests to sign. IMO even though this could be done in an afternoon, everyone - Apple and Google, the CDN / WAF provider, the service provider - is too addicted to the telemetry.
4. nicktikhonov ◴[] No.44328906[source]
That makes no sense. OpenAI doesn't know the secret database connection string or any query results. Perhaps you should have read the code before making baseless claims.
replies(1): >>44328944 #
5. nessbot ◴[] No.44328944{3}[source]
But it knows what you're querying, which depending on what you're doing may also give away a good bit about whats in the DB.
6. kokanee ◴[] No.44329251[source]
It is a web app, though. You just aren't running the server, OpenAI is. And you're packaging the front end in electron instead of chrome to make it feel as if it all runs locally, even though it doesn't.

Side note: I don't see a license anywhere, so technically it isn't open source.