fabric-dw

Return column metadata for a SQL table via ``sys.columns``. Works on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``.

Return health metrics for a table via ``sp_get_table_health_metrics``. Only supported on SQL Analytics Endpoints (not Data Warehouses). The proc surfaces Delta/Parquet layout issues such as small files, fragmentation, excessive deletes/updates, and delayed checkpoints. The stored procedure is Generally Available (announced at Build 2026) but its output column schema is not yet documented by Microsoft. Columns and rows are passed through verbatim. Args: workspace: Workspace name or GUID. item: SQL Analytics Endpoint name or GUID. Data Warehouses are rejected with a ``ToolError``. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``.

Fetch the full definition of a view (schema.view). Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified view name, e.g. ``dbo.vw_sales``.

Return column metadata for a SQL view via ``sys.columns``. Works on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified view name, e.g. ``dbo.vw_sales``.

Return details for a single warehouse (name or GUID).

Return the current server-side database settings for a warehouse. Reads ``result_set_caching``, ``time_travel_retention_days``, ``time_travel_retention_cutoff_date``, and ``data_lake_log_publishing`` from ``sys.databases``. Both Data Warehouses and SQL Analytics Endpoints are supported. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

Return details for a single workspace (name or GUID).

Grant permissions on a securable to a principal. Executes ``GRANT <permissions> ON <scope> TO <principal>``. Blocked by ``FABRIC_MCP_READONLY``. Does NOT require ``FABRIC_MCP_ALLOW_DESTRUCTIVE``. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. permissions: Comma-separated permission tokens (e.g. ``"SELECT,INSERT"``). principal: Grantee principal name (Entra UPN, app GUID, or role name). scope: Securable class -- ``"DATABASE"`` (default), ``"SCHEMA"``, or ``"OBJECT"``. schema: Schema name (required when scope is ``"SCHEMA"``). object_name: Qualified object name ``<schema>.<object>`` (required when scope is ``"OBJECT"``). with_grant_option: When ``True``, allows the grantee to grant the permission to others (adds ``WITH GRANT OPTION``). columns: Optional list of column names for column-level security (OBJECT scope only; permissions must be SELECT, UPDATE, or REFERENCES). Pass ``None`` (omit) for no column restriction. Passing an empty list raises a ``ToolError``.

Load data into an existing Data Warehouse table via ``COPY INTO`` from a remote URL. The target table **must already exist** and have a compatible schema. For auto-create with schema inference from local files, use the CLI ``tables load --file --create`` command instead. ``if_exists`` controls behaviour when the table already exists: - ``"fail"`` (default): raise an error if the table already exists, or if it does not exist (the table must be created first with create_empty_table or create_table). - ``"append"``: load rows into the existing table without modification. Raises an error if the table does not exist. - ``"truncate"``: TRUNCATE the existing table, then load, both inside a single transaction so a failed load leaves the existing rows intact (atomic replace). Requires ``FABRIC_MCP_ALLOW_DESTRUCTIVE=1``. Raises an error if the table does **not** exist. - ``"replace"``: not supported for remote URLs (schema inference requires downloading the file). Use ``"truncate"`` to keep the current schema, or download locally and use the CLI with ``--create --if-exists replace``. Supported file types: ``CSV``, ``PARQUET``. JSON remote URLs require downloading and converting locally first; use the CLI ``tables load`` command for local files (including JSON). For OneLake or same-tenant URLs, no credential is needed. For secured external URLs supply ``credential_type`` and the appropriate ``secret``/``identity`` values. CAUTION: ``truncate`` is permanently destructive. Confirm the source URL and target table before calling. Note: ``secret`` / ``identity`` values are accepted but are NEVER logged or included in any debug output. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``. url: Source URL (OneLake DFS URL or external Azure Blob URL). file_type: ``CSV`` or ``PARQUET``. if_exists: Policy wh…

Terminate a session on a warehouse by session_id. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. session_id: Session ID to terminate (must be a positive integer).

List all available MCP tools grouped by domain. Call this tool first to discover what dedicated tools are available before falling back to ``execute_sql``. Dedicated tools return typed, structured results and avoid SQL dialect pitfalls. Returns: A dict mapping domain name to a sorted list of tool names in that domain. The dict itself is sorted by domain key.

List all Fabric capacities the caller has access to. Requires the ``Capacity.Read.All`` permission. Returns a 403 ToolError when the caller lacks that permission.

Return all active SQL connections on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

List database principals from sys.database_principals. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. principal_type: Filter by type -- ``"user"`` for users, ``"role"`` for database roles, ``"all"`` or omit for no filter.

Return frequently-run queries from queryinsights.frequently_run_queries. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on last_run_start_time. until: Optional ISO-8601 upper bound on last_run_start_time.

List T-SQL user-defined functions on a warehouse or SQL Analytics Endpoint. Scalar UDFs (FN) and inline TVFs (IF) are preview features on Fabric DW as of mid-2026. Function DDL is supported on both Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. schema: When provided, only functions in this schema are returned. kind: Filter by function kind — ``"scalar"`` (FN only), ``"inline-tvf"`` (IF only), or ``"all"`` (FN + IF + TF, the default).

Return principals with access to a Warehouse or SQL Analytics Endpoint item. Uses the Fabric admin API. Accepts both Data Warehouses and SQL Analytics Endpoints -- the item kind is resolved automatically from its GUID. Requires Fabric Administrator role (admin API). See https://learn.microsoft.com/en-us/fabric/admin/microsoft-fabric-admin for details. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID.

Return active lock rows from sys.dm_tran_locks joined with sys.dm_exec_requests. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). waiting_only: When True, restrict to locks with request_status WAIT or CONVERT. blocked_only: When True, show only blocked sessions (victims). The blocker's session_id appears in blocking_session_id. include_database: When True, include DATABASE-scoped lock rows (excluded by default).

Return long-running queries from queryinsights.long_running_queries. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on last_run_start_time. until: Optional ISO-8601 upper bound on last_run_start_time.

List columns with dynamic data masking from sys.masked_columns. Returns all masked columns on the target Data Warehouse or SQL Analytics Endpoint. Filter by *table_schema* and/or *table_name* to narrow results. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. table_schema: Optional schema filter (case-insensitive). Pass ``None`` to include all schemas. table_name: Optional table name filter (case-insensitive). Pass ``None`` to include all tables.

List stored procedures on a warehouse or SQL Analytics Endpoint. Stored procedures are supported on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only procedures in this schema are returned.

Return completed SQL requests from queryinsights.exec_requests_history. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on submit_time. until: Optional ISO-8601 upper bound on submit_time.

Return all restore points for a warehouse.

Return all currently-executing queries on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

List user-defined SQL schemas on a warehouse or SQL Analytics Endpoint. System schemas (``sys``, ``INFORMATION_SCHEMA``, ``db_*`` fixed-role schemas, ``guest``) are excluded. ``dbo`` is included as it is user-writable. Listing schemas is a read-only operation and works on both Fabric Data Warehouses and SQL Analytics Endpoints. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID.

List row-level security policies from sys.security_policies. Returns all security policies and their predicates for the target Data Warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID.

Return completed sessions from queryinsights.exec_sessions_history. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on session_start_time. until: Optional ISO-8601 upper bound on session_start_time.

Return all snapshots belonging to a warehouse.

List all SQL analytics endpoints in a workspace. Args: workspace: Workspace name or GUID. Optional when *all_workspaces* is ``True``; required otherwise. all_workspaces: When ``True``, ignore *workspace* and aggregate results across every workspace the caller can see.

List T-SQL database permissions from sys.database_permissions. Reads from sys.database_permissions joined to sys.database_principals. Returns DATABASE, SCHEMA, and OBJECT class securables with readable names. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. principal: Filter by principal name (optional). schema: Filter by schema name -- returns SCHEMA class rows for this schema (optional). object_name: Filter by qualified object name ``<schema>.<object>`` -- returns OBJECT class rows for this object (optional).

Return SQL pool insight events from queryinsights.sql_pool_insights. Args: workspace: Workspace name or GUID. warehouse: Warehouse or SQL Analytics Endpoint name or GUID. limit: Maximum rows to return (1-10000, default 100). since: Optional ISO-8601 lower bound on timestamp. until: Optional ISO-8601 upper bound on timestamp.

Return the list of custom SQL pools for a workspace. Requires workspace admin role. This tool targets a **beta / preview** API.

List statistics on a warehouse or SQL Analytics Endpoint. Both Data Warehouses and SQL Analytics Endpoints are supported. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only statistics on tables in this schema are returned. table: When provided, only statistics on this table (unqualified name) are returned. user_only: When True, only user-created statistics are returned. auto_only: When True, only auto-created statistics are returned.

Show per-table metadata sync freshness via ``sys.dm_db_external_tables_log_status``. Only supported on SQL Analytics Endpoints (not Data Warehouses), and only on endpoints created after the workspace's 'New metadata sync' (preview) setting was enabled. A table with no matching DMV row still appears, with its sync fields ``null`` instead of the row being dropped -- this means no sync information is available for that table, NOT that it has never synced; do not treat a ``null`` row as proof the table has never synced. IMPORTANT for agents: by default this listing only includes tables already present in the endpoint's catalog (``sys.tables``), which is itself maintained by the metadata sync. A Lakehouse table whose discovery has not completed, or has failed, has no catalog row and so is **absent from this result entirely** -- it will not appear as a row with empty fields, it simply will not be there. Do not conclude a table does not exist, or was deleted, just because it is missing from this list. Pass ``check_lakehouse=True`` to close part of that gap: it cross-references the backing Lakehouse's own table inventory (one or more extra REST calls -- avoid setting this on every call of a tool an agent may invoke repeatedly) and adds a row with ``in_endpoint_catalog=false`` and all sync fields ``null`` for every table it finds there but not in the catalog, comparing names exactly (case-sensitively, matching Fabric's default collation). A Lakehouse table that differs from a catalog table only by case gets ``case_mismatched_catalog_name`` set to that catalog name instead of being reported as a flat miss. This works for both classic and schema-enabled Lakehouse-backed endpoints (the schema-enabled path uses a preview OneLake table API). If the endpoint's backing item cannot be resolved to a Lakehouse at all (a mirrored database, or similar), ``check_lakehouse=True`` raises a ``ToolError`` explaining why, rather than silently returning the unchanged catalog-only result:…

List SQL tables on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only tables in this schema are returned.

List SQL views on a warehouse or SQL Analytics Endpoint. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. schema: When provided, only views in this schema are returned.

List all warehouses and SQL analytics endpoints in a workspace. Args: workspace: Workspace name or GUID. Optional when *all_workspaces* is ``True``; required otherwise. all_workspaces: When ``True``, ignore *workspace* and aggregate results across every workspace the caller can see.

List all Fabric workspaces the caller has access to. When a workspace allowlist is configured (via ``FABRIC_MCP_WORKSPACES`` env var or ``[mcp] workspace_allowlist`` in ``config.toml``) only the workspaces that match the allowlist (by name or GUID) are returned.

Load data into a Data Warehouse table via ``COPY INTO`` from a remote URL. Supported file types: ``CSV``, ``PARQUET``. JSON remote URLs require downloading and converting locally first; use the CLI ``tables load`` command for local files (including JSON). For OneLake or same-tenant URLs, no credential is needed. For secured external URLs (Azure Blob Storage SAS, etc.), supply ``credential_type`` and the appropriate ``secret``/``identity`` values. CAUTION: This operation loads data into the target table. Confirm the source URL and target table before calling. Note: ``secret`` / ``identity`` values are accepted but are NEVER logged or included in any debug output. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``. url: Source URL (OneLake DFS URL or external Azure Blob URL). file_type: ``CSV`` or ``PARQUET``. credential_type: Credential type for the source URL. secret: Credential secret (not logged). identity: Identity for managed-identity or service-principal. delimiter: CSV column delimiter. has_header: Whether the CSV file has a header row. encoding: CSV file encoding. field_quote: CSV field-quote character. row_terminator: CSV row terminator. max_errors: Maximum errors before aborting. rejected_row_location: URL for rejected-row output.

Return permissions for the current connection via sys.fn_my_permissions. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. scope: Scope string -- ``"database"`` (default), ``"schema:<name>"``, or ``"object:<schema>.<object>"``.

Return up to *count* rows from a table as JSON-serialisable columns + rows. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``. count: Maximum number of rows to return (1-10000, default 10). as_of: Optional ISO-8601 UTC timestamp for a point-in-time (time-travel) read. When supplied the query uses ``OPTION (FOR TIMESTAMP AS OF ...)``. Omit to read the latest data.

Return up to *count* rows from a view as JSON-serialisable columns + rows. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified view name, e.g. ``dbo.vw_sales``. count: Maximum number of rows to return (1-10000, default 10). as_of: Optional ISO-8601 UTC timestamp for a point-in-time (time-travel) read. When supplied the query uses ``OPTION (FOR TIMESTAMP AS OF ...)``. Omit to read the latest data.

Refresh metadata for a SQL analytics endpoint (sync from the underlying Lakehouse). This is a long-running operation (LRO) that is polled to completion. Returns a list of per-table sync results. Use this tool for SCHEMA changes (tables added or dropped). For cheap, per-table DATA-only staleness on a table you already know exists, use ``refresh_table_metadata`` instead -- it does not pick up schema changes. Args: workspace: Workspace name or GUID. endpoint: SQL analytics endpoint name or GUID. recreate_tables: When ``True``, drop and recreate all tables during the refresh. Use to resolve inconsistencies or force a clean rebuild. **Destructive** — use with caution. Requires ``FABRIC_MCP_ALLOW_DESTRUCTIVE=1`` when enabled.

Refresh one table's metadata via ``sys.sp_dw_refresh_ext_table``. This is the cheap, per-table refresh for DATA-only staleness: it re-reads the table's underlying Delta log without a full item-level sync. Use ``refresh_sql_endpoint_metadata`` instead when the SCHEMA changed (tables added or dropped) -- this tool does not pick up schema changes. Only supported on SQL Analytics Endpoints (not Data Warehouses), and only on endpoints created after the workspace's 'New metadata sync' (preview) setting was enabled. Mutating (respects ``FABRIC_MCP_READONLY``) but NOT destructive -- it never drops or recreates anything, so it does not require the ``FABRIC_MCP_ALLOW_DESTRUCTIVE`` opt-in. ``qualified_name`` must already exist in the endpoint's catalog -- the procedure does not create it, and raises a ``ToolError`` naming the table instead. That same error also fires when the table exists but you lack permission to it, since the driver does not distinguish the two -- ``refresh_sql_endpoint_metadata`` only helps the missing case, not a permissions one. The procedure may also decline a table by type, for reasons Microsoft does not document, raised as a ``ToolError`` in the same family as the legacy-sync one above; that failure also points at ``refresh_sql_endpoint_metadata`` (or ``fdw sql-endpoints refresh``) as the working alternative. Args: workspace: Workspace name or GUID. item: SQL Analytics Endpoint name or GUID. Data Warehouses are rejected with a ``ToolError``. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``.

Remove a single audit action group without overwriting the others. Idempotent -- if the group is not present the current settings are returned unchanged. Auditing must already be enabled. CAUTION: changes take effect immediately on the live audit policy. CAUTION: Each audit write reads current settings via an eventually-consistent GET that may lag a recent PATCH by several minutes. Two audit writes issued within that window can cause the second to silently revert the first. Space audit writes at least a few minutes apart. Args: workspace: Workspace name or GUID. warehouse: Warehouse or SQL analytics endpoint name or GUID. group: Action group name, e.g. ``BATCH_COMPLETED_GROUP``.

Rename a warehouse snapshot.

Rename a SQL table via ``sp_rename`` (Data-Warehouse-only). Renames the table in-place within the same schema using T-SQL ``EXEC sp_rename``. Both the current qualified name and the new bare name are passed as bound parameters — no SQL injection is possible. ``sp_rename`` cannot move a table to a different schema, so *new_name* must be an unqualified (bare) name without a dot. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Current dot-separated qualified table name, e.g. ``dbo.sales``. new_name: New table name (unqualified, e.g. ``sales_v2``). Must not contain a dot.

Rename a SQL view via sp_rename. Works on both Data Warehouses and SQL Analytics Endpoints. The new name must be a bare (unqualified) identifier — ``sp_rename`` cannot move a view across schemas. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Current dot-separated qualified view name, e.g. ``dbo.vw_sales``. new_name: New bare view name (no schema prefix), e.g. ``vw_revenue``.

Rename a Warehouse (and optionally update its description).

Restore a warehouse in-place to a restore point. WARNING: This is a destructive, long-running operation. The warehouse will be unavailable for approximately 10 minutes while the restore completes. Args: workspace: Workspace name or GUID. warehouse: Warehouse name or GUID. restore_point_id: The restore point ID string to restore to.