MCP Tool Permissions

Each MCP tool requires one or more permissions. Service accounts inherit their group’s permissions, so to use a tool the group must include all of its required permissions. Tools that require permissions the service account lacks are automatically hidden from the MCP client. See Custom groups for how to set up a group, and Service accounts for how to issue an API key.

Minimum permissions to enable every MCP tool

To give a service account access to every MCP tool, create a custom group with the permissions below and assign your service account to it.

Cancel diffs (cancel_datadiff)
Create diffs (create_datadiff)
Edit monitors (edit_alert)
List data sources (list_data_sources)
List users (list_users)
View diffs (view_datadiff)
View knowledge graph (view_knowledge_graph)
View monitors (view_monitor)

Tools by category

Organization

Tool	What it does	Required permissions	Requires feature
`list_org_members`	Retrieves all active members of the authenticated user’s organization.	List users (`list_users`)	—

Data Sources

Tool	What it does	Required permissions	Requires feature
`get_dataset_schema`	Get the column schema for a table on a data source.	List data sources (`list_data_sources`)	—
`list_data_sources`	Retrieves all data sources accessible to the authenticated user.	List data sources (`list_data_sources`)	—
`run_query`	Executes a SQL query against the specified data source and returns the results.	List data sources (`list_data_sources`)	—
`search_tables`	Search for tables on a data source by name.	List data sources (`list_data_sources`)	—

Data Diffs

Tool	What it does	Required permissions	Requires feature
`cancel_datadiff`	Cancel a running or queued data diff.	Cancel diffs (`cancel_datadiff`)	Data Diffs
`create_datadiff`	Launches a new data diff to compare two datasets (tables or queries).	Create diffs (`create_datadiff`)	Data Diffs
`get_datadiff_overview`	Retrieves a structured overview of a data diff, mirroring the UI’s Overview tab.	View diffs (`view_datadiff`)	Data Diffs
`get_datadiff_result_section`	Retrieves detailed results for a specific section of a data diff, corresponding to UI tabs.	View diffs (`view_datadiff`)	Data Diffs
`list_datadiffs`	Lists existing data diffs for the organization, ordered by creation date (newest first).	View diffs (`view_datadiff`)	Data Diffs

Monitors

Tool	What it does	Required permissions	Requires feature
`get_monitor`	Get full details for a monitor by ID.	View monitors (`view_monitor`)	Monitors
`get_monitor_as_code`	Export a monitor’s complete configuration as YAML (monitors-as-code format).	View monitors (`view_monitor`)	Monitors
`get_monitor_run_results`	Get recent run history for a monitor, ordered by most recent first.	View monitors (`view_monitor`)	Monitors
`get_monitors_schema`	Returns the JSON Schema for the monitors-as-code YAML config format.	View monitors (`view_monitor`)	Monitors
`list_monitors`	Lists monitors for the organization, ordered by creation date (newest first).	View monitors (`view_monitor`)	Monitors
`provision_monitors`	Create, update, or delete monitors from a declarative YAML config (monitors-as-code).	Edit monitors (`edit_alert`)	Monitors
`trigger_monitor_run`	Manually trigger a monitor check. The check runs asynchronously.	Edit monitors (`edit_alert`)	Monitors

Knowledge Graph

Tool	What it does	Required permissions	Requires feature
`knowledge_graph_expand`	BFS expansion from a seed node in the knowledge graph.	View knowledge graph (`view_knowledge_graph`)	Knowledge Graph
`knowledge_graph_get_schema_details`	Return full definitions for one or more items in a schema category.	View knowledge graph (`view_knowledge_graph`)	Knowledge Graph
`knowledge_graph_run_query`	Execute a named query template against the knowledge graph.	View knowledge graph (`view_knowledge_graph`)	Knowledge Graph

Feedback

Tool	What it does	Required permissions	Requires feature
`submit_feedback`	Submit feedback to the Datafold team — report bugs, request features, or share general thoughts.	—	—

INTRODUCTION

DATA PLATFORM MIGRATIONS

DATA DIFFS

CI/CD TESTING

DATA MONITORS

DATA EXPLORER

INTEGRATIONS

DEPLOYMENT

SECURITY

SUPPORT

MCP Tool Permissions

Minimum permissions to enable every MCP tool

Tools by category

Organization

Data Sources

Data Diffs

Monitors

Knowledge Graph

Feedback

​Minimum permissions to enable every MCP tool

​Tools by category

​Organization

​Data Sources

​Data Diffs

​Monitors

​Knowledge Graph

​Feedback

Minimum permissions to enable every MCP tool

Tools by category

Organization

Data Sources

Data Diffs

Monitors

Knowledge Graph

Feedback