> ## Documentation Index
> Fetch the complete documentation index at: https://docs.datafold.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP Tool Permissions

> Which permissions each MCP tool requires. Use this reference when scoping a service account's group for MCP use.

Each MCP tool requires one or more permissions. Service accounts inherit their group's permissions, so to use a tool the group must include all of its required permissions. Tools that require permissions the service account lacks are automatically hidden from the MCP client.

See [Custom groups](https://docs.datafold.com/classic/security/user-roles-and-permissions.md#custom-groups) for how to set up a group, and [Service accounts](https://docs.datafold.com/classic/security/service-accounts.md) for how to issue an API key.

This page describes MCP tool permissions on app.datafold.com, eu.datafold.com, and Classic Dedicated Cloud deployments.

## Minimum permissions to enable every MCP tool

To give a service account access to the MCP tools, create a custom group with the permissions below and assign your service account to it.

* **Cancel diffs** (`cancel_datadiff`)
* **Create diffs** (`create_datadiff`)
* **Edit monitors** (`edit_alert`)
* **List data sources** (`list_data_sources`)
* **List users** (`list_users`)
* **View diffs** (`view_datadiff`)
* **View monitors** (`view_monitor`)

Custom groups cannot include **Admin** (`admin`). Tools that need **Admin** are available only to accounts in the built-in `admin` group. Add the service account to `admin` only if it needs those tools.

## Tools by category

### Organization

| Tool | What it does | Required permissions | Requires feature |
| - | - | - | - |
| `list_org_members` | Retrieves all active members of the authenticated user's organization. | List users (`list_users`) | — |

### Data Sources

| Tool | What it does | Required permissions | Requires feature |
| - | - | - | - |
| `get_dataset_schema` | Get the column schema for a table on a data source. | List data sources (`list_data_sources`) | — |
| `list_data_sources` | Retrieves all data sources accessible to the authenticated user. | List data sources (`list_data_sources`) | — |
| `run_query` | Executes a SQL query against the specified data source and returns the results. | List data sources (`list_data_sources`) | — |
| `search_tables` | Search for tables on a data source by name. | List data sources (`list_data_sources`) | — |

### Source Repos

| Tool | What it does | Required permissions | Requires feature |
| - | - | - | - |
| `list_source_repos` | List git source repositories configured on the org. | Admin (`admin`) | CI |

### Data Diffs

| Tool | What it does | Required permissions | Requires feature |
| - | - | - | - |
| `cancel_datadiff` | Cancel a running or queued data diff. | Cancel diffs (`cancel_datadiff`) | Data Diffs |
| `create_datadiff` | Launches a new data diff to compare two datasets (tables or queries). | Create diffs (`create_datadiff`) | Data Diffs |
| `get_datadiff_overview` | Retrieves a structured overview of a data diff, mirroring the UI's Overview tab. | View diffs (`view_datadiff`) | Data Diffs |
| `get_datadiff_result_section` | Retrieves detailed results for a specific section of a data diff, corresponding to UI tabs. | View diffs (`view_datadiff`) | Data Diffs |
| `list_datadiffs` | Lists existing data diffs for the organization, ordered by creation date (newest first). | View diffs (`view_datadiff`) | Data Diffs |

### Monitors

| Tool | What it does | Required permissions | Requires feature |
| - | - | - | - |
| `get_monitor` | Get full details for a monitor by ID. | View monitors (`view_monitor`) | Monitors |
| `get_monitor_as_code` | Export a monitor's complete configuration as YAML (monitors-as-code format). | View monitors (`view_monitor`) | Monitors |
| `get_monitor_run_results` | Get recent run history for a monitor, ordered by most recent first. | View monitors (`view_monitor`) | Monitors |
| `get_monitors_schema` | Returns the JSON Schema for the monitors-as-code YAML config format. | View monitors (`view_monitor`) | Monitors |
| `list_monitors` | Lists monitors for the organization, ordered by creation date (newest first). | View monitors (`view_monitor`) | Monitors |
| `provision_monitors` | Create, update, or delete monitors from a declarative YAML config (monitors-as-code). | Edit monitors (`edit_alert`) | Monitors |
| `trigger_monitor_run` | Manually trigger a monitor check. The check runs asynchronously. | Edit monitors (`edit_alert`) | Monitors |
| `trigger_monitors_run` | Manually trigger checks for many monitors at once, selected by explicit IDs and/or tags. | Edit monitors (`edit_alert`) | Monitors |

### Feedback

| Tool | What it does | Required permissions | Requires feature |
| - | - | - | - |
| `submit_feedback` | Submit feedback to the Datafold team — report bugs, request features, or share general thoughts. | — | — |

### Other

| Tool | What it does | Required permissions | Requires feature |
| - | - | - | - |
| `search_datafold_docs` | Search the Datafold public documentation site (docs.datafold.com). | — | — |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.