Providing access to the data is easy. It is just an MCP or equivalent, and coding such CRUD is cheap now.

Applying the actions is unsolved. Unless you YOLO the LLMs, taking stateful actions automatically requires a lot of protective infrastructure, solid testing infra etc.

It’s all just more code, but a “create me a shopping website” LLM is likely not going to be doing the infrastructure level thinking required to handle it for now.

Might be but I just can't imagine a customer being fine with a loose cannon agent in their environment. E.g. coding agents are ignoring instructions. Who is to say that Claudes solution to a, say, slow backup isn't deleting the backup?

Imagine an agent shadowing all your terminals, providing ideas and asking to run commands that will let it verify the hypotheses it comes up with, while at the same time doing research on vendor docs, etc...

Quite safe, and already a force multiplier - this would be a harness. Maybe have it be able to write to a shadow system with similar (ideally same) hardware to verify it's hypothesis on how the system works, etc...