Are there any resources or community posts that explain how retool works and what code / queries are exposed to users? I'm trying to get a handle on what security consideration I should take into account when building an app. For example can an app user modify a sql query to change the input parame…

Hi @DavidS Thanks for sharing the links you found! For security purposes, I'd also recommend ensuring that you are using prepared statements (also linked in the Preventing query spoofing doc). This is on by default, and only admins can turn off prepared statements from the resource page. If you are…

Retool - how it works and security

💬 Queries and Resources

DavidS January 27, 2023, 12:16pm 3

And for reference more info on where queries are run in this post.

1 Like

Topic		Replies	Views
How to prevent end-users from tampering with query parameters in embedded Retool apps (multi-tenant context)? 💬 External Apps security	6	129	March 4, 2026
Using Retool to write directly in the db 💬 App Building	6	152	July 14, 2025
Retool due diligence: vendor lock-in and licensing 💬 App Building	6	187	April 27, 2026
Is Retool intended for onboarding our users/customers? 💬 Queries and Resources	9	2454	August 2, 2023
Security Consideration: Server Side Rendering vs Client Side Rendering 💬 Queries and Resources	4	2593	May 31, 2023

Retool - how it works and security

Related topics