I have found it really helpful to just give read only access to application databases for my agents and since they have the source code they get to learn and run regular http calls against the services. As long as the service itself is built local first with say a sync engine works like a charm