MCP Tool Permissions

Each MCP tool requires one or more permissions. Service accounts inherit their group’s permissions, so to use a tool the group must include all of its required permissions. Tools that require permissions the service account lacks are automatically hidden from the MCP client. See Custom groups for how to set up a group, and Service accounts for how to issue an API key. This page describes MCP tool permissions on app.datafold.com, eu.datafold.com, and Classic Dedicated Cloud deployments.

Minimum permissions to enable every MCP tool

To give a service account access to the MCP tools, create a custom group with the permissions below and assign your service account to it.

Cancel diffs (cancel_datadiff)
Create diffs (create_datadiff)
Edit monitors (edit_alert)
List data sources (list_data_sources)
List users (list_users)
View diffs (view_datadiff)
View monitors (view_monitor)

Custom groups cannot include Admin (admin). Tools that need Admin are available only to accounts in the built-in admin group. Add the service account to admin only if it needs those tools.

Tools by category

Organization

Tool	What it does	Required permissions	Requires feature
`list_org_members`	Retrieves all active members of the authenticated user’s organization.	List users (`list_users`)	—

Data Sources

Tool	What it does	Required permissions	Requires feature
`get_dataset_schema`	Get the column schema for a table on a data source.	List data sources (`list_data_sources`)	—
`list_data_sources`	Retrieves all data sources accessible to the authenticated user.	List data sources (`list_data_sources`)	—
`run_query`	Executes a SQL query against the specified data source and returns the results.	List data sources (`list_data_sources`)	—
`search_tables`	Search for tables on a data source by name.	List data sources (`list_data_sources`)	—

Source Repos

Tool	What it does	Required permissions	Requires feature
`list_source_repos`	List git source repositories configured on the org.	Admin (`admin`)	CI

Data Diffs

Tool	What it does	Required permissions	Requires feature
`cancel_datadiff`	Cancel a running or queued data diff.	Cancel diffs (`cancel_datadiff`)	Data Diffs
`create_datadiff`	Launches a new data diff to compare two datasets (tables or queries).	Create diffs (`create_datadiff`)	Data Diffs
`get_datadiff_overview`	Retrieves a structured overview of a data diff, mirroring the UI’s Overview tab.	View diffs (`view_datadiff`)	Data Diffs
`get_datadiff_result_section`	Retrieves detailed results for a specific section of a data diff, corresponding to UI tabs.	View diffs (`view_datadiff`)	Data Diffs
`list_datadiffs`	Lists existing data diffs for the organization, ordered by creation date (newest first).	View diffs (`view_datadiff`)	Data Diffs

Monitors

Tool	What it does	Required permissions	Requires feature
`get_monitor`	Get full details for a monitor by ID.	View monitors (`view_monitor`)	Monitors
`get_monitor_as_code`	Export a monitor’s complete configuration as YAML (monitors-as-code format).	View monitors (`view_monitor`)	Monitors
`get_monitor_run_results`	Get recent run history for a monitor, ordered by most recent first.	View monitors (`view_monitor`)	Monitors
`get_monitors_schema`	Returns the JSON Schema for the monitors-as-code YAML config format.	View monitors (`view_monitor`)	Monitors
`list_monitors`	Lists monitors for the organization, ordered by creation date (newest first).	View monitors (`view_monitor`)	Monitors
`provision_monitors`	Create, update, or delete monitors from a declarative YAML config (monitors-as-code).	Edit monitors (`edit_alert`)	Monitors
`trigger_monitor_run`	Manually trigger a monitor check. The check runs asynchronously.	Edit monitors (`edit_alert`)	Monitors
`trigger_monitors_run`	Manually trigger checks for many monitors at once, selected by explicit IDs and/or tags.	Edit monitors (`edit_alert`)	Monitors

Feedback

Tool	What it does	Required permissions	Requires feature
`submit_feedback`	Submit feedback to the Datafold team — report bugs, request features, or share general thoughts.	—	—

Other

Tool	What it does	Required permissions	Requires feature
`search_datafold_docs`	Search the Datafold public documentation site (docs.datafold.com).	—	—

INTRODUCTION

DATA PLATFORM MIGRATIONS

DATA DIFFS

CI/CD TESTING

DATA MONITORS

DATA EXPLORER

INTEGRATIONS

CLASSIC DEPLOYMENT

SECURITY

SUPPORT

MCP Tool Permissions

Minimum permissions to enable every MCP tool

Tools by category

Organization

Data Sources

Source Repos

Data Diffs

Monitors

Feedback

Other

​Minimum permissions to enable every MCP tool

​Tools by category

​Organization

​Data Sources

​Source Repos

​Data Diffs

​Monitors

​Feedback

​Other

Minimum permissions to enable every MCP tool

Tools by category

Organization

Data Sources

Source Repos

Data Diffs

Monitors

Feedback

Other