fabric-dw

OCI · GHCR.IO/SDEBRUYN/FABRIC-DW:2026.7.3 · SCANNED AUG 3

MCP server for Microsoft Fabric Data Warehouses and SQL Analytics Endpoints

Available components

oci · ghcr.io/sdebruyn/fabric-dw:2026.7.3 37

0 this week 37 37 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security0

Malware scan not yet available for this package.Unverified
CVE data not yet available for this package.Unverified
Install-script risk not yet assessed.Unverified
Dependency-health data not yet available.Unverified

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 14 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability62

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 19385 tokens (~161/item across 120 items; 120 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage73

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
5% of tool parameters carry a description.Partial
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

oci · ghcr.io/sdebruyn/fabric-dw:2026.7.3

Claude Codex opencode Hermes Other

# add to Claude Code

claude mcp add sdebruyn-fabric-dw-mcp -- docker run --rm -i ghcr.io/sdebruyn/fabric-dw:2026.7.3

# add to Codex CLI

codex mcp add sdebruyn-fabric-dw-mcp -- docker run --rm -i ghcr.io/sdebruyn/fabric-dw:2026.7.3

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sdebruyn-fabric-dw-mcp": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "ghcr.io/sdebruyn/fabric-dw:2026.7.3"
      ],
      "enabled": true
    }
  }
}

# ~/.hermes/config.yaml

mcp_servers:
  sdebruyn-fabric-dw-mcp:
    command: "docker"
    args: ["run", "--rm", "-i", "ghcr.io/sdebruyn/fabric-dw:2026.7.3"]

// mcp.json

{
  "mcpServers": {
    "sdebruyn-fabric-dw-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/sdebruyn/fabric-dw:2026.7.3"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +3
- Stability: unverified → 0.20 ▲ functional
31 Jul 26 −3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
27 Jul 26 +26
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Schema quality: good functional
- First check of Tool coverage: 5 functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: fail functional
26 Jul 26 11

First indexed and scored.
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed oci/ghcr.io/sdebruyn/fabric-dw:2026.7.3

Provenance none

Ecosystem: oci · Outcome: none

Reason: no_attestation

MCP tools — 120 exposed · ~19,211 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

get_table_columns ~94

Return column metadata for a SQL table via ``sys.columns``. Works on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

get_table_health_metrics ~175

Return health metrics for a table via ``sp_get_table_health_metrics``. Only supported on SQL Analytics Endpoints (not Data Warehouses). The proc surfaces Delta/Parquet layout issues such as small files, fragmentation, excessive deletes/updates, and delayed checkpoints. The stored procedure is Generally Available (announced at Build 2026) but its output column schema is not yet documented by Microsoft. Columns and rows are passed through verbatim. Args: workspace: Workspace name or GUID. item: SQL Analytics Endpoint name or GUID. Data Warehouses are rejected with a ``ToolError``. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

get_view ~81

Fetch the full definition of a view (schema.view). Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified view name, e.g. ``dbo.vw_sales``.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

get_view_columns ~96

Return column metadata for a SQL view via ``sys.columns``. Works on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified view name, e.g. ``dbo.vw_sales``.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

get_warehouse ~34

Return details for a single warehouse (name or GUID).

Input Output Examples

Name	Type	Req	Description
warehouse	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

get_warehouse_settings ~113

Return the current server-side database settings for a warehouse. Reads ``result_set_caching``, ``time_travel_retention_days``, ``time_travel_retention_cutoff_date``, and ``data_lake_log_publishing`` from ``sys.databases``. Both Data Warehouses and SQL Analytics Endpoints are supported. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

get_workspace ~26

Return details for a single workspace (name or GUID).

Input Output Examples

Name	Type	Req	Description
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

grant_permission ~346

Grant permissions on a securable to a principal. Executes ``GRANT <permissions> ON <scope> TO <principal>``. Blocked by ``FABRIC_MCP_READONLY``. Does NOT require ``FABRIC_MCP_ALLOW_DESTRUCTIVE``. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. permissions: Comma-separated permission tokens (e.g. ``"SELECT,INSERT"``). principal: Grantee principal name (Entra UPN, app GUID, or role name). scope: Securable class -- ``"DATABASE"`` (default), ``"SCHEMA"``, or ``"OBJECT"``. schema: Schema name (required when scope is ``"SCHEMA"``). object_name: Qualified object name ``<schema>.<object>`` (required when scope is ``"OBJECT"``). with_grant_option: When ``True``, allows the grantee to grant the permission to others (adds ``WITH GRANT OPTION``). columns: Optional list of column names for column-level security (OBJECT scope only; permissions must be SELECT, UPDATE, or REFERENCES). Pass ``None`` (omit) for no column restriction. Passing an empty list raises a ``ToolError``.

Input Output Examples

Name	Type	Req	Description
columns	—	—	—
item	string	yes	—
object_name	—	—	—
permissions	string	yes	—
principal	string	yes	—
schema	—	—	—
scope	string	—	—
with_grant_option	boolean	—	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

import_table_from_url ~903

Load data into an existing Data Warehouse table via ``COPY INTO`` from a remote URL. The target table **must already exist** and have a compatible schema. For auto-create with schema inference from local files, use the CLI ``tables load --file --create`` command instead. ``if_exists`` controls behaviour when the table already exists: - ``"fail"`` (default): raise an error if the table already exists, or if it does not exist (the table must be created first with create_empty_table or create_table). - ``"append"``: load rows into the existing table without modification. Raises an error if the table does not exist. - ``"truncate"``: TRUNCATE the existing table, then load, both inside a single transaction so a failed load leaves the existing rows intact (atomic replace). Requires ``FABRIC_MCP_ALLOW_DESTRUCTIVE=1``. Raises an error if the table does **not** exist. - ``"replace"``: not supported for remote URLs (schema inference requires downloading the file). Use ``"truncate"`` to keep the current schema, or download locally and use the CLI with ``--create --if-exists replace``. Supported file types: ``CSV``, ``PARQUET``. JSON remote URLs require downloading and converting locally first; use the CLI ``tables load`` command for local files (including JSON). For OneLake or same-tenant URLs, no credential is needed. For secured external URLs supply ``credential_type`` and the appropriate ``secret``/``identity`` values. CAUTION: ``truncate`` is permanently destructive. Confirm the source URL and target table before calling. Note: ``secret`` / ``identity`` values are accepted but are NEVER logged or included in any debug output. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``. url: Source URL (OneLake DFS URL or external Azure Blob URL). file_type: ``CSV`` or ``PARQUET``. if_exists: Policy wh…

Input Output Examples

Name	Type	Req	Description
credential_type	string	—	Credential type for secured external URLs. Use 'none' for OneLake or public URLs.
delimiter	—	—	CSV column delimiter (e.g. ',', '\t').
encoding	—	—	CSV file encoding (e.g. 'UTF8', 'UTF8BOM').
field_quote	—	—	CSV field-quote character.
file_type	string	yes	File type. JSON is not supported for remote URLs; download and convert locally first.
has_header	boolean	—	When True, the first CSV row is a header and is skipped.
identity	—	—	Identity value for managed-identity or service-principal credential types.
if_exists	string	—	What to do when the target table exists or is absent. 'fail': error if the table already exists, or if it does not exist (default). 'append': load into the existing table; error if the table is absen…
item	string	yes	—
max_errors	—	—	Maximum number of errors before aborting.
qualified_name	string	yes	—
rejected_row_location	—	—	URL to write rejected rows to.
row_terminator	—	—	CSV row terminator (e.g. '\n', '\r\n').
secret	—	—	Credential secret (SAS token, client secret, or account key). NEVER log or echo this value.
url	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

kill_session ~78

Terminate a session on a warehouse by session_id. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. session_id: Session ID to terminate (must be a positive integer).

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
session_id	integer	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

list_capacities ~44

List all Fabric capacities the caller has access to. Requires the ``Capacity.Read.All`` permission. Returns a 403 ToolError when the caller lacks that permission.

Input Output Examples

Input schema present but exposes no named parameters.

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_connections ~57

Return all active SQL connections on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_database_principals ~100

List database principals from sys.database_principals. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. principal_type: Filter by type -- ``"user"`` for users, ``"role"`` for database roles, ``"all"`` or omit for no filter.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
principal_type	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_frequent_queries ~125

Return frequently-run queries from queryinsights.frequently_run_queries. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on last_run_start_time. until: Optional ISO-8601 upper bound on last_run_start_time.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
limit	integer	—	—
since	—	—	—
until	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_functions ~175

List T-SQL user-defined functions on a warehouse or SQL Analytics Endpoint. Scalar UDFs (FN) and inline TVFs (IF) are preview features on Fabric DW as of mid-2026. Function DDL is supported on both Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. schema: When provided, only functions in this schema are returned. kind: Filter by function kind — ``"scalar"`` (FN only), ``"inline-tvf"`` (IF only), or ``"all"`` (FN + IF + TF, the default).

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
kind	string	—	—
schema	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_item_permissions ~113

Return principals with access to a Warehouse or SQL Analytics Endpoint item. Uses the Fabric admin API. Accepts both Data Warehouses and SQL Analytics Endpoints -- the item kind is resolved automatically from its GUID. Requires Fabric Administrator role (admin API). See https://learn.microsoft.com/en-us/fabric/admin/microsoft-fabric-admin for details. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_locks ~174

Return active lock rows from sys.dm_tran_locks joined with sys.dm_exec_requests. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). waiting_only: When True, restrict to locks with request_status WAIT or CONVERT. blocked_only: When True, show only blocked sessions (victims). The blocker's session_id appears in blocking_session_id. include_database: When True, include DATABASE-scoped lock rows (excluded by default).

Input Output Examples

Name	Type	Req	Description
blocked_only	boolean	—	—
include_database	boolean	—	—
item	string	yes	—
limit	integer	—	—
waiting_only	boolean	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_long_running_queries ~124

Return long-running queries from queryinsights.long_running_queries. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on last_run_start_time. until: Optional ISO-8601 upper bound on last_run_start_time.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
limit	integer	—	—
since	—	—	—
until	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_masked_columns ~148

List columns with dynamic data masking from sys.masked_columns. Returns all masked columns on the target Data Warehouse or SQL Analytics Endpoint. Filter by *table_schema* and/or *table_name* to narrow results. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. table_schema: Optional schema filter (case-insensitive). Pass ``None`` to include all schemas. table_name: Optional table name filter (case-insensitive). Pass ``None`` to include all tables.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
table_name	—	—	—
table_schema	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_procedures ~92

List stored procedures on a warehouse or SQL Analytics Endpoint. Stored procedures are supported on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only procedures in this schema are returned.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
schema	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_request_history ~119

Return completed SQL requests from queryinsights.exec_requests_history. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on submit_time. until: Optional ISO-8601 upper bound on submit_time.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
limit	integer	—	—
since	—	—	—
until	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_restore_points ~31

Return all restore points for a warehouse.

Input Output Examples

Name	Type	Req	Description
warehouse	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_running_queries ~60

Return all currently-executing queries on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_schemas ~123

List user-defined SQL schemas on a warehouse or SQL Analytics Endpoint. System schemas (``sys``, ``INFORMATION_SCHEMA``, ``db_*`` fixed-role schemas, ``guest``) are excluded. ``dbo`` is included as it is user-writable. Listing schemas is a read-only operation and works on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_security_policies ~74

List row-level security policies from sys.security_policies. Returns all security policies and their predicates for the target Data Warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_session_history ~120

Return completed sessions from queryinsights.exec_sessions_history. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on session_start_time. until: Optional ISO-8601 upper bound on session_start_time.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
limit	integer	—	—
since	—	—	—
until	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_snapshots ~31

Return all snapshots belonging to a warehouse.

Input Output Examples

Name	Type	Req	Description
warehouse	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_sql_endpoints ~87

List all SQL analytics endpoints in a workspace. Args: workspace: Workspace name or GUID. Optional when *all_workspaces* is ``True``; required otherwise. all_workspaces: When ``True``, ignore *workspace* and aggregate results across every workspace the caller can see.

Input Output Examples

Name	Type	Req	Description
all_workspaces	boolean	—	—
workspace	—	—	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_sql_permissions ~159

List T-SQL database permissions from sys.database_permissions. Reads from sys.database_permissions joined to sys.database_principals. Returns DATABASE, SCHEMA, and OBJECT class securables with readable names. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. principal: Filter by principal name (optional). schema: Filter by schema name -- returns SCHEMA class rows for this schema (optional). object_name: Filter by qualified object name ``<schema>.<object>`` -- returns OBJECT class rows for this object (optional).

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
object_name	—	—	—
principal	—	—	—
schema	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_sql_pool_insights ~121

Return SQL pool insight events from queryinsights.sql_pool_insights. Args: workspace: Workspace name or GUID. warehouse: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on timestamp. until: Optional ISO-8601 upper bound on timestamp.

Input Output Examples

Name	Type	Req	Description
limit	integer	—	—
since	—	—	—
until	—	—	—
warehouse	string	yes	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_sql_pools ~45

Return the list of custom SQL pools for a workspace. Requires workspace admin role. This tool targets a **beta / preview** API.

Input Output Examples

Name	Type	Req	Description
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_statistics ~154

List statistics on a warehouse or SQL Analytics Endpoint. Both Data Warehouses and SQL Analytics Endpoints are supported. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only statistics on tables in this schema are returned. table: When provided, only statistics on this table (unqualified name) are returned. user_only: When True, only user-created statistics are returned. auto_only: When True, only auto-created statistics are returned.

Input Output Examples

Name	Type	Req	Description
auto_only	boolean	—	—
item	string	yes	—
schema	—	—	—
table	—	—	—
user_only	boolean	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_tables ~73

List SQL tables on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only tables in this schema are returned.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
schema	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_views ~73

List SQL views on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only views in this schema are returned.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
schema	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_warehouses ~89

List all warehouses and SQL analytics endpoints in a workspace. Args: workspace: Workspace name or GUID. Optional when *all_workspaces* is ``True``; required otherwise. all_workspaces: When ``True``, ignore *workspace* and aggregate results across every workspace the caller can see.

Input Output Examples

Name	Type	Req	Description
all_workspaces	boolean	—	—
workspace	—	—	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

list_workspaces ~77

List all Fabric workspaces the caller has access to. When a workspace allowlist is configured (via ``FABRIC_MCP_WORKSPACES`` env var or ``[mcp] workspace_allowlist`` in ``config.toml``) only the workspaces that match the allowlist (by name or GUID) are returned.

Input Output Examples

Input schema present but exposes no named parameters.

Name	Type	Req	Description
result	array	yes	—

No examples provided.

load_table_from_url ~579

Load data into a Data Warehouse table via ``COPY INTO`` from a remote URL. Supported file types: ``CSV``, ``PARQUET``. JSON remote URLs require downloading and converting locally first; use the CLI ``tables load`` command for local files (including JSON). For OneLake or same-tenant URLs, no credential is needed. For secured external URLs (Azure Blob Storage SAS, etc.), supply ``credential_type`` and the appropriate ``secret``/``identity`` values. CAUTION: This operation loads data into the target table. Confirm the source URL and target table before calling. Note: ``secret`` / ``identity`` values are accepted but are NEVER logged or included in any debug output. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``. url: Source URL (OneLake DFS URL or external Azure Blob URL). file_type: ``CSV`` or ``PARQUET``. credential_type: Credential type for the source URL. secret: Credential secret (not logged). identity: Identity for managed-identity or service-principal. delimiter: CSV column delimiter. has_header: Whether the CSV file has a header row. encoding: CSV file encoding. field_quote: CSV field-quote character. row_terminator: CSV row terminator. max_errors: Maximum errors before aborting. rejected_row_location: URL for rejected-row output.

Input Output Examples

Name	Type	Req	Description
credential_type	string	—	Credential type for secured external URLs. Use 'none' for OneLake or public URLs.
delimiter	—	—	CSV column delimiter (e.g. ',', '\t').
encoding	—	—	CSV file encoding (e.g. 'UTF8', 'UTF8BOM').
field_quote	—	—	CSV field-quote character.
file_type	string	yes	File type to load. JSON is not supported for remote URLs; download and convert locally first.
has_header	boolean	—	When True, the first CSV row is a header and is skipped.
identity	—	—	Identity value for managed-identity or service-principal credential types.
item	string	yes	—
max_errors	—	—	Maximum number of errors before aborting.
qualified_name	string	yes	—
rejected_row_location	—	—	URL to write rejected rows to.
row_terminator	—	—	CSV row terminator (e.g. '\n', '\r\n').
secret	—	—	Credential secret (SAS token, client secret, or account key). NEVER log or echo this value.
url	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

my_permissions ~94

Return permissions for the current connection via sys.fn_my_permissions. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. scope: Scope string -- ``"database"`` (default), ``"schema:<name>"``, or ``"object:<schema>.<object>"``.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
scope	—	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

read_table ~170

Return up to *count* rows from a table as JSON-serialisable columns + rows. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``. count: Maximum number of rows to return (1-10000, default 10). as_of: Optional ISO-8601 UTC timestamp for a point-in-time (time-travel) read. When supplied the query uses ``OPTION (FOR TIMESTAMP AS OF ...)``. Omit to read the latest data.

Input Output Examples

Name	Type	Req	Description
as_of	—	—	—
count	integer	—	—
item	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

read_view ~172

Return up to *count* rows from a view as JSON-serialisable columns + rows. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified view name, e.g. ``dbo.vw_sales``. count: Maximum number of rows to return (1-10000, default 10). as_of: Optional ISO-8601 UTC timestamp for a point-in-time (time-travel) read. When supplied the query uses ``OPTION (FOR TIMESTAMP AS OF ...)``. Omit to read the latest data.

Input Output Examples

Name	Type	Req	Description
as_of	—	—	—
count	integer	—	—
item	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

refresh_sql_endpoint_metadata ~156

Refresh metadata for a SQL analytics endpoint (sync from the underlying Lakehouse). This is a long-running operation (LRO) that is polled to completion. Returns a list of per-table sync results. Args: workspace: Workspace name or GUID. endpoint: SQL analytics endpoint name or GUID. recreate_tables: When ``True``, drop and recreate all tables during the refresh. Use to resolve inconsistencies or force a clean rebuild. **Destructive** — use with caution. Requires ``FABRIC_MCP_ALLOW_DESTRUCTIVE=1`` when enabled.

Input Output Examples

Name	Type	Req	Description
endpoint	string	yes	—
recreate_tables	boolean	—	—
workspace	string	yes	—

Name	Type	Req	Description
result	array	yes	—

No examples provided.

remove_audit_group ~176

Remove a single audit action group without overwriting the others. Idempotent -- if the group is not present the current settings are returned unchanged. Auditing must already be enabled. CAUTION: changes take effect immediately on the live audit policy. CAUTION: Each audit write reads current settings via an eventually-consistent GET that may lag a recent PATCH by several minutes. Two audit writes issued within that window can cause the second to silently revert the first. Space audit writes at least a few minutes apart. Args: workspace: Workspace name or GUID. warehouse: Warehouse or SQL analytics endpoint name or GUID. group: Action group name, e.g. ``BATCH_COMPLETED_GROUP``.

Input Output Examples

Name	Type	Req	Description
group	string	yes	—
warehouse	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

rename_snapshot ~40

Rename a warehouse snapshot.

Input Output Examples

Name	Type	Req	Description
description	—	—	—
new_name	string	yes	—
snapshot	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

rename_table ~207

Rename a SQL table via ``sp_rename`` (Data-Warehouse-only). Renames the table in-place within the same schema using T-SQL ``EXEC sp_rename``. Both the current qualified name and the new bare name are passed as bound parameters — no SQL injection is possible. ``sp_rename`` cannot move a table to a different schema, so *new_name* must be an unqualified (bare) name without a dot. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Current dot-separated qualified table name, e.g. ``dbo.sales``. new_name: New table name (unqualified, e.g. ``sales_v2``). Must not contain a dot.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
new_name	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

rename_view ~149

Rename a SQL view via sp_rename. Works on both Data Warehouses and SQL Analytics Endpoints. The new name must be a bare (unqualified) identifier — ``sp_rename`` cannot move a view across schemas. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Current dot-separated qualified view name, e.g. ``dbo.vw_sales``. new_name: New bare view name (no schema prefix), e.g. ``vw_revenue``.

Input Output Examples

Name	Type	Req	Description
item	string	yes	—
new_name	string	yes	—
qualified_name	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

rename_warehouse ~46

Rename a Warehouse (and optionally update its description).

Input Output Examples

Name	Type	Req	Description
description	—	—	—
new_name	string	yes	—
warehouse	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

restore_warehouse_in_place ~106

Restore a warehouse in-place to a restore point. WARNING: This is a destructive, long-running operation. The warehouse will be unavailable for approximately 10 minutes while the restore completes. Args: workspace: Workspace name or GUID. warehouse: Warehouse name or GUID. restore_point_id: The restore point ID string to restore to.

Input Output Examples

Name	Type	Req	Description
restore_point_id	string	yes	—
warehouse	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

revoke_permission ~402

Revoke permissions on a securable from a principal. Executes ``REVOKE <permissions> ON <scope> FROM <principal>``. Blocked by ``FABRIC_MCP_READONLY``. Requires ``FABRIC_MCP_ALLOW_DESTRUCTIVE=1`` because revoke removes an existing permission (destructive operation). Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. permissions: Comma-separated permission tokens (e.g. ``"SELECT,INSERT"``). principal: Principal name to revoke from (Entra UPN, app GUID, or role name). scope: Securable class -- ``"DATABASE"`` (default), ``"SCHEMA"``, or ``"OBJECT"``. schema: Schema name (required when scope is ``"SCHEMA"``). object_name: Qualified object name ``<schema>.<object>`` (required when scope is ``"OBJECT"``). columns: Optional list of column names for column-level security (OBJECT scope only; permissions must be SELECT, UPDATE, or REFERENCES). Pass ``None`` (omit) for no column restriction. Passing an empty list raises a ``ToolError``. grant_option_only: When ``True``, revokes only the grant option (adds ``GRANT OPTION FOR``), leaving the base permission in place. cascade: When ``True``, cascades the revocation to principals the grantee has granted the permission to (adds ``CASCADE``).

Input Output Examples

Name	Type	Req	Description
cascade	boolean	—	—
columns	—	—	—
grant_option_only	boolean	—	—
item	string	yes	—
object_name	—	—	—
permissions	string	yes	—
principal	string	yes	—
schema	—	—	—
scope	string	—	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

roll_snapshot_timestamp ~117

Roll a snapshot's timestamp forward (or reset to current). Args: workspace: Workspace name or GUID. warehouse: Parent warehouse name or GUID (used for the SQL connection). snapshot_name: The snapshot database name to roll. new_dt: Optional ISO-8601 datetime string; defaults to CURRENT_TIMESTAMP. Naive datetimes (no timezone offset) are interpreted as UTC.

Input Output Examples

Name	Type	Req	Description
new_dt	—	—	—
snapshot_name	string	yes	—
warehouse	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

set_audit_action_groups ~177

Replace the audited action groups for a warehouse or SQL analytics endpoint. Only replaces the action groups. Does not toggle the audit enabled or disabled state; if auditing was Disabled before the call it remains Disabled afterwards. CAUTION: Each audit write reads current settings via an eventually-consistent GET that may lag a recent PATCH by several minutes. The retention period read from that GET is round-tripped; if retention was changed within the lag window, this call may silently revert it. Space audit writes at least a few minutes apart. Args: workspace: Workspace name or GUID. warehouse: Warehouse or SQL analytics endpoint name or GUID. action_groups: List of audit action group names.

Input Output Examples

Name	Type	Req	Description
action_groups	array	yes	—
warehouse	string	yes	—
workspace	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	11
27 Jul	37
28 Jul	37
29 Jul	37
30 Jul	37
31 Jul	34
1 Aug	34
2 Aug	37
3 Aug	37