AI for SSMS, compared — SQL Sage vs GitHub Copilot vs SsmsAgentic

01The choice today

If you work in SQL Server Management Studio 22 and want AI next to your query editor, there are five options as of 2026-10-20:

• GitHub Copilot in SSMS — Microsoft's first-party assistant, installed via the Visual Studio Installer (the “AI Assistance” workload). You sign in with a GitHub account with Copilot access and pick a model from GitHub Copilot's list, which includes Claude models; its Agent mode, generally available since SSMS 22.10.2, can query the server with your approval. Copilot Free costs $0 with 50 chat requests and 2,000 completions a month, and every Copilot plan includes its AI usage.
• SsmsAgentic — an independent AI pair-DBA panel that brings Claude into SSMS 22, with SSMS 21 on a best-effort basis. Per its README it hosts the Claude Code CLI as a child process and uses that CLI's Claude sign-in; per its site, every statement waits for your approval, every query, approval and denial goes to a local JSON log, and a 15-day trial precedes one-time licences.
• SQL Sage — an independent AI pair-DBA that runs on the Claude or ChatGPT/Codex account you already have (through Claude Code or the Codex CLI) or your own Anthropic API key (BYOK, no CLI). AI usage is not included. It adds a Proven & Accountable layer the other two do not document: deterministic blast-radius before ALTER/DROP, a proof that an AI rewrite returns the same rows, one-click incident triage from live DMVs, and a tamper-evident audit log you can export as evidence.
• Devart dbForge AI Assistant — AI inside dbForge SQL Complete in SSMS 21 and 22, with AI usage included: Express is $0 with 200,000 tokens a month; Professional is $9.95 a month or $99.95 a year, as a subscription only. Its page lists OpenAI and Anthropic (Claude) models. SQL Complete itself has a free Express edition; Standard is $129.95 a year. (dbForge AI Assistant, SQL Complete editions, read 2026-10-20)
• Redgate SQL Prompt — $210 per user per year. Its AI features (Redgate Assistant and AI code completion, both in preview) are included in an active subscription, and perpetual licences are excluded. (SQL Prompt, AI in SQL Prompt FAQ, read 2026-10-20)

The table below compares the first three row by row; for Devart and Redgate this page states only the facts above, from their own pages.

SQL Sage and SsmsAgentic are genuinely close on the fundamentals — both independent, both run through the Claude Code CLI, both classify statements and confirm writes, both keep an audit log. So the honest question isn't “who has a CLI” — it's which model do you want to run, and do you need the changes proven and logged as evidence. The table below sticks to what each vendor documents publicly.

02What SQL Sage is — and isn't

We'd rather tell you where it doesn't fit than oversell it. If the proof-and-audit layer below doesn't matter to your work, one of the other options may serve you just as well — and the table says where they win.

03The difference: proof & accountability

Everything above the line — chat, T-SQL help and reading the server with your approval — Copilot's Agent mode, SsmsAgentic and SQL Sage all do. The reason to reach for SQL Sage is what it does below the line, in one sentence: Copilot answers. SQL Sage shows what an ALTER or DROP will break and proves, on your current data, that a rewrite returns the same rows — using the Claude or ChatGPT account you already have, for $39 once.

• Change-Impact — prove the blast radius before you ALTER or DROP. It reads the system catalogs and reports the dependent views, procedures, functions, triggers and constraints, the inbound foreign keys, the rows at risk and the object's indexes — deterministically, not guessed. Honest limit: static analysis cannot see dynamic (EXEC / sp_executesql) or cross-database SQL, and it says so.
• Prove-It — proof that an AI rewrite returns the same rows. A deterministic, server-side multiset fingerprint (order-independent and duplicate-aware) plus the logical-reads delta, with a clear EQUIVALENT / DIFFERENT / UNDECIDABLE verdict. It runs read-only in a rolled-back transaction, costs zero AI tokens, and is honest when a query genuinely can't be proven (a nondeterministic function, or TOP without ORDER BY).
• Incident Mode — on-call triage that cites the proof. One click runs a deterministic, read-only snapshot of what the server is doing right now — the blocking chain, top waits with each one's % share, and the most expensive in-flight queries — every number cited from a live DMV, never guessed. Reads server state only, never table data.
• Tamper-evident audit log + evidence pack. The queries SQL Sage runs or blocks are recorded to a local, hash-chained audit log — on by default, switched off with Audit SQL — so an edit, deletion or reorder of any entry still in the file is detectable (SHA-256 chain). Not logged: schema look-ups (table lists, column definitions), a few read-only diagnostics (wait stats, plan-cache top queries, active requests, deadlock history) and repository reads; the health check and Incident Mode are logged by name, without their SQL. Export an evidence pack in Markdown + JSON — what the AI did to production and who approved it — with a one-line integrity verdict. (Honest scope: tamper-evident, not tamper-proof. The chain has no secret key, so anyone who can write to your Windows profile can rebuild the chain, delete a whole day's file or drop the newest lines, and the chain will not show it — it's a tamper-evidence aid, not a certified immutable compliance record.)
• Evidence-first, not guess-first. The assistant grounds claims in real catalog and DMV values rather than asserting them, and states plainly when something is dynamic, cross-database or otherwise unresolved instead of glossing over it.
• Connect a repository (preview). Opt-in, per repository, on the Claude channel: the assistant reasons about your application's source code alongside the database. Native file, shell and search tools are disabled while a repo is connected — it reads the live repository only through SQL Sage's own read_repo_file / search_repo tools, confined to that folder, and nothing is copied. Secret files (.env, appsettings*.json, keys, .git/ and similar) are refused, and recognisable secret tokens in other files are redacted; a plain-text password in ordinary source code is not recognised.

Neither GitHub Copilot in SSMS nor SsmsAgentic describes an equivalent proof-and-equivalence layer in its public documentation. SsmsAgentic does keep an audit log — we don't claim otherwise — but its site does not describe it as tamper-evident or as an exportable evidence pack. Where their docs are silent, the table marks the cell “—” rather than guessing.

04Full comparison table

Where the others are ahead

• SsmsAgentic supports SSMS 21 on a best-effort basis; SQL Sage supports SSMS 22 only. It lists Synapse dedicated pools among the platforms it works with, which SQL Sage does not claim. It states “no telemetry, no analytics, and no usage tracking”, while SQL Sage makes the few requests listed in section 07. And its money-back window is 30 days, against our 14.
• GitHub Copilot in SSMS is Microsoft's first-party assistant and includes its AI usage in every plan, where SQL Sage runs on an AI plan or key you pay for separately. It has a free tier rather than a time-limited trial, and Copilot Free includes Agent mode, generally available since SSMS 22.10.2. It offers ghost-text completions as you type (from SSMS 22.2), and, depending on your plan, lets you pick from GPT, Claude and Gemini models in one place.
• Devart's dbForge AI Assistant includes its AI usage too, with a free Express tier of 200,000 tokens a month inside SQL Complete in SSMS.
• Redgate SQL Prompt's subscription includes its AI features (in preview), hosted by Redgate.

05Setup — CLI sign-in, BYOK, and the CLI

There's a common misconception worth clearing up: that one of these tools is “the simple one with no CLI”. In fact both SQL Sage's CLI sign-in path and SsmsAgentic use the Claude Code CLI. The real setup difference is that SQL Sage gives you a second path that needs no CLI at all, plus a second provider.

• SQL Sage — CLI sign-in. You sign in inside Claude Code or the Codex CLI with your own Claude or ChatGPT account. On this path SQL Sage never sees, stores, or transmits your credentials; it only asks the CLI whether you're signed in. No separate key, no GitHub account, no Copilot licence — but AI usage is not included: Claude Code needs a Claude plan that includes it or an Anthropic Console account, and Codex a ChatGPT account.
• SQL Sage — BYOK (no CLI). Prefer not to run a CLI? Paste your own Anthropic API key and SQL Sage talks to the API directly — no Claude Code, no background process. The key is the one secret it keeps, stored on your machine encrypted with Windows DPAPI.
• GitHub Copilot in SSMS. Installed through the Visual Studio Installer's “AI Assistance” workload; you sign in with a GitHub account with Copilot access. You choose from GitHub Copilot's model list (GPT, Claude, Gemini) or, outside Copilot Business and Enterprise, add your own API key — but a GitHub account is always part of the setup, rather than a Claude/ChatGPT subscription you connect. (For context, the earlier “Copilot in SSMS 21” used your own Azure OpenAI endpoint, deployment and API key; that was replaced by GitHub Copilot in SSMS 22.)
• SsmsAgentic. Per its README, it launches the Claude Code CLI as a child process and uses that CLI's own sign-in, reusing your live SSMS connection. It is Claude-only.

06Providers & choice

If it matters which model answers, the options differ:

• SQL Sage supports both Claude (via Claude Code) and ChatGPT / Codex (via the Codex CLI), and you pick a model from a dropdown; new Claude and ChatGPT/Codex models appear in the picker without a plugin release.
• GitHub Copilot in SSMS provides models through GitHub Copilot (or your own API key outside Business/Enterprise) — you sign in with GitHub rather than connecting your own Claude or ChatGPT subscription.
• SsmsAgentic brings Claude to SSMS; support for other providers is not stated on its site.

07Safety, privacy & telemetry

Here we speak in detail about SQL Sage, because that's the product whose internals we can state as fact. For the others, where their public documentation doesn't spell out the equivalent behaviour, the cells above are marked “—” rather than guessed at. Where SsmsAgentic's README does state a behaviour (per-statement Allow/Deny, an audit log to disk), we credit it as fact.

In SQL Sage:

• Read-only by default. Statements are classified by the same parser SSMS uses (ScriptDom). A SELECT the AI writes runs read-only on system catalogs and DMVs, and on your own tables only after you agree to share results for the session — until then the AI sees only its column names and types. DML and DDL require a confirmation dialog showing the exact SQL before anything executes — every time. Safety is a feature here, not friction: only destructive operations stop for you.
• Your data stays yours. Schema metadata and your query text go to the model; query result rows never do, unless you opt in per session. Server and database names can be masked. An egress panel shows the exact payload before it is sent.
• Local, tamper-evident audit. The queries SQL Sage runs or blocks are appended to a local, hash-chained JSONL log under %LOCALAPPDATA%\SqlSage\audit\ — local-only, no network egress, on by default and switched off with Audit SQL — exportable as an evidence pack. Not logged: schema look-ups (table lists, column definitions), a few read-only diagnostics (wait stats, plan-cache top queries, active requests, deadlock history) and repository reads; the health check and Incident Mode are logged by name, without their SQL.
• No token custody. On the CLI sign-in path, sign-in lives in Claude Code / Codex; SQL Sage never holds your account credentials. With BYOK, the one secret is your key, encrypted with DPAPI. Secrets are never in plaintext, the registry, or version control.
• No analytics or tracking code — and every request to us, listed. The extension talks to our servers only for: the update check (version.json) when the panel starts and about every 6 hours while SSMS stays open, or when you click Check for updates (switch the automatic checks off with Check for updates automatically); the signed model list; for a paid licence, licence validation that sends only the licence identifier — our server records the date of the last validation, kept for 35 days, to count active installations; and one anonymous count when you click Download in the update banner. None of these carries your name, email, a device or installation identifier, or anything from your database. Details: Privacy Policy, section 6.

If any of the other tools document the same guarantees, treat their own docs as the source of truth — we don't claim what we can't verify, and we don't claim they lack what they simply don't mention.

08Updates & releases

SQL Sage ships frequently. The panel checks for new versions and shows a banner when one is out; you download and run the signed installer (close SSMS first) — nothing is installed silently, and you can switch the check off with Check for updates. The model list updates independently too: new Claude and ChatGPT/Codex models show up in the picker without waiting for a plugin release, because the list is fetched from a hosted manifest.

09FAQ

10Which should you pick?

The three compared above all run in SSMS 22, so it comes down to fit:

• Pick SQL Sage if you touch production and want changes proven and logged as evidence — deterministic blast-radius, prove-equivalence, incident triage, a tamper-evident audit log — on the Claude or ChatGPT/Codex account you already have, through its CLI or with a CLI-free key (AI usage not included).
• Pick GitHub Copilot in SSMS if you have no paid AI plan and Copilot Free's 50 chats a month are enough, or you want Microsoft's first-party assistant with AI usage included in its plans, installed through the Visual Studio Installer — and if ghost-text completions as you type matter most.
• Pick SsmsAgentic if you specifically want a Claude pair-DBA in SSMS with per-statement approval and are happy with Claude only — or if you still need SSMS 21 (best-effort there) or Synapse dedicated pools.

Want the SQL Sage detail on CLI sign-in and what each provider gives you? See Claude in SSMS — or ChatGPT/Codex — on your own AI account, which also lists the five ways to get Claude into SSMS today; for multi-step work on the server, see agents in SSMS; or read the full documentation. Every install starts a 30-day free trial with all features, no credit card.

AI usage not included: SQL Sage needs your own AI access (Claude Code on a paid Claude plan, a ChatGPT plan that includes the Codex CLI, or your own Anthropic API key). See pricing

Start the 30-day free trial

11Sources & disclaimer

• GitHub Copilot in SSMS — Microsoft Learn, all read 2026-10-20: “What is GitHub Copilot in SSMS?” (ms.date 2026-09-28, updated 2026-10-14) learn.microsoft.com/en-us/ssms/github-copilot/overview; “Agent mode” (ms.date 2026-09-28, updated 2026-10-14) learn.microsoft.com/en-us/ssms/github-copilot/agent-mode; “AI models”, including bring your own model (ms.date 2026-06-09, updated 2026-10-14) learn.microsoft.com/en-us/ssms/github-copilot/ai-models; release notes, with Agent mode in preview from 22.7.0 (2026-06-09) and generally available in 22.10.2 (2026-09-28) learn.microsoft.com/en-us/ssms/release-notes-22; install: learn.microsoft.com/en-us/ssms/github-copilot/installation-state
• GitHub Copilot plans and prices, including Copilot Free's 2,000 completions and 50 chat requests a month — GitHub Docs and github.com (read 2026-10-20): docs.github.com/en/copilot/get-started/plans; github.com/features/copilot/plans
• SsmsAgentic — vendor site, including pricing, trial, refund, SSMS versions, “Works with” and the telemetry statement (read 2026-10-20): ssmsagentic.io; its public README (read 2026-10-20): github.com/ado-webco/ssms-agentic
• Devart — dbForge AI Assistant, its Express and Professional tiers and models (read 2026-10-20): devart.com/dbforge/ai-assistant; SQL Complete editions and SSMS versions (read 2026-10-20): devart.com/dbforge/sql/sqlcomplete/editions.html
• Redgate — SQL Prompt price (read 2026-10-20): red-gate.com/products/sql-prompt; AI in SQL Prompt FAQ, “included in an active subscription … (perpetual licenses are excluded)” (read 2026-10-20): documentation.red-gate.com/sp/ai-in-sql-prompt/ai-in-sql-prompt-faq

SQL Sage facts on this page reflect the current product; see the documentation, the pricing, the refund policy and the home page for the authoritative description.