diff --git a/docker-compose.yml b/docker-compose.yml
index a3a0cde..bc78aaf 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -45,6 +45,8 @@ services:
     image: floci/floci:latest-compat
     ports:
       - "4566:4566"
+      # RDS data-plane proxies. CreateDBInstance allocates ports in 7001-7099.
+      - "7001-7099:7001-7099"
     volumes:
       # Floci runs Lambda functions in throwaway containers, so it needs the host
       # Docker daemon. Without this, invoke fails with "Failed to start Lambda
@@ -103,4 +105,4 @@ services:
 
 networks:
   floci_default:
-    name: floci_default
\ No newline at end of file
+    name: floci_default
diff --git a/packages/frontend/src/components/ResourceInspector.tsx b/packages/frontend/src/components/ResourceInspector.tsx
index 954413c..9993226 100644
--- a/packages/frontend/src/components/ResourceInspector.tsx
+++ b/packages/frontend/src/components/ResourceInspector.tsx
@@ -335,7 +335,12 @@ function DatabaseConnectionCommand({ engine, address, port, database, username }
     : engine.includes('mysql') || engine.includes('mariadb')
       ? `mysql --host=${host} --port=${port} --user=${username} --password ${database}`
       : `sqlcmd -S ${host},${port} -U ${username} -P <password> -d ${database}`
-  return <div className="metadata-block"><p className="metric-label">Terminal connection</p><p className="copy-value mono">{command}<CopyValueButton value={command} label="Connection command" /></p><p className="muted compact-text">Use the endpoint, port, database, and username above in DBeaver or another database client. The password is never retained by the console.</p></div>
+  const uri = engine.includes('postgres')
+    ? `postgresql://${username}:<password>@${host}:${port}/${database}`
+    : engine.includes('mysql') || engine.includes('mariadb')
+      ? `mysql://${username}:<password>@${host}:${port}/${database}`
+      : `Server=${host},${port};Database=${database};User Id=${username};Password=<password>;`
+  return <div className="metadata-block"><p className="metric-label">Terminal connection</p><p className="copy-value mono">{command}<CopyValueButton value={command} label="Connection command" /></p><p className="metric-label">Client connection URI</p><p className="copy-value mono">{uri}<CopyValueButton value={uri} label="Connection URI" /></p><p className="muted compact-text">Paste the URI into a compatible database client, then replace the password placeholder. The password is never retained by the console.</p></div>
 }
 
 function DatabaseLifecycleSection({ status }: { status?: string | null }) {