Dataset resource tools
The MCP tools that create, update, and delete dataset resources: tables, views, unions, and connectors.
Each of the four kinds carries a create, update, and delete tool named for the kind, and every one takes a required spaceId. list-connector-names is the only list tool here. The names of tables, views, unions, and lookups come from list-dataset-names under Query and schema tools, which return every dataset in the catalog without saying which kind each name belongs to.
An agent sees each change the next time it reads tools/list, while a script that hard-codes a tool name or schema breaks when that tool changes.
Each section below is one tool as MCP access registers it: its title, its description, the annotations it sets, and the input and output schemas from tools/list. Field paths use parent.child for a nested object, parent[].child for the items of an array, and parent[Value].child for one variant of a field that takes several shapes.
create-table
Create a table.
Creates a new table, staging the change in a draft changeset.
Creates the resource in the active chat's space.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
query | string | Required | At most 1000000 characters. |
sourceFormat | enum | Optional | One of parsed_lines, csv. |
deploy | boolean | Required | |
name | string | Required | |
retentionDays | integer | Optional | May be null. Greater than 0. |
partitioningColumn | string | Optional | May be null. Must not be empty. |
sortedByColumn | string | Optional | May be null. Must not be empty. |
keyColumns | array of string | Optional | |
startsAt | string | Optional | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
maxLatency | enum | Optional | One of MAX_1H, MAX_1D. May be null. |
archived | boolean | Optional | |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
id | string | The ID of the created table. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
update-table
Update a table.
Updates an existing table, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
query | string | Optional | At most 1000000 characters. |
sourceFormat | enum | Optional | One of parsed_lines, csv. |
deploy | boolean | Optional | |
name | string | Optional | |
retentionDays | integer | Optional | May be null. Greater than 0. |
partitioningColumn | string | Optional | May be null. Must not be empty. |
sortedByColumn | string | Optional | May be null. Must not be empty. |
keyColumns | array of string | Optional | |
startsAt | string | Optional | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
maxLatency | enum | Optional | One of MAX_1H, MAX_1D. May be null. |
archived | boolean | Optional | |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
tableId | string | Required | The ID of the table to update. Pattern: ^TBL_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
table | object | |
table.id | string | Pattern: ^TBL_[A-Z0-9]{1,7}$. |
table.createdAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
table.createdByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
table.updatedAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
table.updatedByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
table.organizationId | string | Pattern: ^ORG_[A-Z0-9]{1,7}$. |
table.spaceId | string | Pattern: ^SPC_[A-Z0-9]{1,7}$. |
table.deploymentStatus | enum | One of UNDEPLOYED, DEPLOYED, FAILED, DEGRADED, DEPLOY_PENDING, DEPLOY_IN_PROGRESS, UPDATE_PENDING, UPDATE_IN_PROGRESS, REFRESH_IN_PROGRESS, ARCHIVED, CLEANUP_PENDING, CLEANUP_IN_PROGRESS. |
table.changesetStatus | enum | One of Unchanged, Added, Modified, Deleted. May be null. |
table.query | string | At most 1000000 characters. |
table.sourceFormat | enum | One of parsed_lines, csv. |
table.statusDetails | object | |
table.deploy | boolean | |
table.tableType | enum | One of ingest, continuous, static. |
table.connectorIds | array of string | |
table.connectorId | string | Pattern: ^CON_[A-Z0-9]{1,7}$. |
table.name | string | The name of the table in schema.name format. |
table.archived | boolean | Defaults to false. |
table.retentionDays | integer | May be null. Greater than 0. |
table.partitioningColumn | string | May be null. Must not be empty. |
table.sortedByColumn | string | May be null. Must not be empty. |
table.keyColumns | array of string | Defaults to []. |
table.sortedByColumns | array of string | Defaults to []. |
table.readOnly | boolean | |
table.isSystemCreated | boolean | |
table.parserId | string | Pattern: ^PRS_[A-Z0-9]{1,7}$. |
table.parserName | string | |
table.integrationId | string | Pattern: ^INT_[A-Z0-9]{1,7}$. |
table.detectionId | string | Pattern: ^DET_[A-Z0-9]{1,7}$. |
table.lookupId | string | Pattern: ^LKP_[A-Z0-9]{1,7}$. |
table.lookupName | string | |
table.createCase | boolean | Defaults to false. |
table.signalSnapshotNotifications | boolean | |
table.startsAt | string | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
table.maxLatency | enum | One of MAX_1H, MAX_1D, MAX_15M. May be null. |
table.lastMaterializedAt | string | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
table.schemaId | string | May be null. Pattern: ^SCH_[A-Z0-9]{1,7}$. |
table.fromDatasets | array of object | |
table.fromDatasets[].name | string | |
table.fromDatasets[].resourceName | string | |
table.fromDatasets[].resourceId | string | |
table.fromDatasets[].spaceId | string | Space containing the dependency dataset. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
table.version | integer | May be null. Greater than 0. |
table.deleted | boolean | Defaults to false. |
table.changesetId | string | May be null. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
table.originKey | string | May be null. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
delete-table
Delete a table.
Deletes a table, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint true, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
tableId | string | Required | The ID of the table to delete. Pattern: ^TBL_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
create-view
Create a view.
Creates a new view, staging the change in a draft changeset.
Creates the resource in the active chat's space.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
name | string | Required | The name of the view in schema.name format. |
query | string | Required | At most 1000000 characters. |
materialized | boolean | Required | |
maxLatency | enum | Required | One of MAX_1H, MAX_1D. |
deploy | boolean | Required | |
retentionDays | integer | Optional | May be null. Greater than 0. |
sortedByColumns | array of string | Optional | |
archived | boolean | Optional | |
startsAt | string | Optional | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
id | string | The ID of the created view. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
update-view
Update a view.
Updates an existing view, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
name | string | Optional | The name of the view in schema.name format. |
query | string | Optional | At most 1000000 characters. |
materialized | boolean | Optional | |
maxLatency | enum | Optional | One of MAX_1H, MAX_1D. |
deploy | boolean | Optional | |
retentionDays | integer | Optional | May be null. Greater than 0. |
sortedByColumns | array of string | Optional | |
archived | boolean | Optional | |
startsAt | string | Optional | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
viewId | string | Required | The ID of the view to update. Pattern: ^VIE_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
view | object | |
view.name | string | The name of the view in schema.name format. |
view.createdAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
view.updatedAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
view.materialized | boolean | |
view.maxLatency | enum | One of MAX_1H, MAX_1D. |
view.startsAt | string | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
view.deploy | boolean | |
view.archived | boolean | Defaults to false. |
view.retentionDays | integer | May be null. Greater than 0. |
view.id | string | Pattern: ^VIE_[A-Z0-9]{1,7}$. |
view.organizationId | string | Pattern: ^ORG_[A-Z0-9]{1,7}$. |
view.createdByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
view.updatedByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
view.query | string | At most 1000000 characters. |
view.sortedByColumns | array of string | Defaults to []. |
view.endsAt | string | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
view.deploymentStatus | enum | One of UNDEPLOYED, DEPLOYED, FAILED, DEGRADED, DEPLOY_PENDING, DEPLOY_IN_PROGRESS, UPDATE_PENDING, UPDATE_IN_PROGRESS, REFRESH_IN_PROGRESS, ARCHIVED, CLEANUP_PENDING, CLEANUP_IN_PROGRESS. |
view.changesetStatus | enum | One of Unchanged, Added, Modified, Deleted. May be null. |
view.lastMaterializedAt | string | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
view.isSystemCreated | boolean | |
view.schemaId | string | May be null. Pattern: ^SCH_[A-Z0-9]{1,7}$. |
view.spaceId | string | Pattern: ^SPC_[A-Z0-9]{1,7}$. |
view.fromDatasets | array of object | |
view.fromDatasets[].name | string | |
view.fromDatasets[].resourceName | string | |
view.fromDatasets[].resourceId | string | |
view.fromDatasets[].spaceId | string | Space containing the dependency dataset. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
view.detection | string | Pattern: ^DET_[A-Z0-9]{1,7}$. |
view.integration | string | Pattern: ^INT_[A-Z0-9]{1,7}$. |
view.lookup | string | Pattern: ^LKP_[A-Z0-9]{1,7}$. |
view.readOnly | boolean | |
view.version | integer | May be null. Greater than 0. |
view.deleted | boolean | Defaults to false. |
view.changesetId | string | May be null. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
view.originKey | string | May be null. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
delete-view
Delete a view.
Deletes a view, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint true, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
viewId | string | Required | The ID of the view to delete. Pattern: ^VIE_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
create-union
Create a union.
Creates a new union, staging the change in a draft changeset.
Creates the resource in the active chat's space.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
name | string | Required | |
deploy | boolean | Required | |
fromDatasets | array of object | Required | |
fromDatasets[].resourceName | string | Required | Constrained by a pattern; see the schema in tools/list. |
fromDatasets[].spaceId | string | Required | Space containing the dependency dataset. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
maxLatency | enum | Optional | One of MAX_1H, MAX_1D. |
retentionDays | integer | Optional | May be null. Greater than 0. |
archived | boolean | Optional | |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
id | string | The ID of the created union. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
update-union
Update a union.
Updates an existing union, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
name | string | Optional | |
deploy | boolean | Optional | |
fromDatasets | array of object | Optional | |
fromDatasets[].resourceName | string | Required | Constrained by a pattern; see the schema in tools/list. |
fromDatasets[].spaceId | string | Required | Space containing the dependency dataset. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
maxLatency | enum | Optional | One of MAX_1H, MAX_1D. |
retentionDays | integer | Optional | May be null. Greater than 0. |
archived | boolean | Optional | |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
unionId | string | Required | The ID of the union to update. Pattern: ^ION_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
union | object | |
union.id | string | Pattern: ^ION_[A-Z0-9]{1,7}$. |
union.organizationId | string | Pattern: ^ORG_[A-Z0-9]{1,7}$. |
union.spaceId | string | Pattern: ^SPC_[A-Z0-9]{1,7}$. |
union.name | string | The name of the union in schema.name format. |
union.startsAt | string | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
union.endsAt | string | JavaScript Date or other runtime timestamp in tool results. May be null. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
union.createdAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
union.createdByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
union.updatedAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
union.updatedByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
union.materialized | boolean | |
union.maxLatency | enum | One of MAX_1H, MAX_1D. |
union.deploy | boolean | |
union.deploymentStatus | enum | One of UNDEPLOYED, DEPLOYED, FAILED, DEGRADED, DEPLOY_PENDING, DEPLOY_IN_PROGRESS, UPDATE_PENDING, UPDATE_IN_PROGRESS, REFRESH_IN_PROGRESS, ARCHIVED, CLEANUP_PENDING, CLEANUP_IN_PROGRESS. |
union.changesetStatus | enum | One of Unchanged, Added, Modified, Deleted. May be null. |
union.lastMaterializedAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
union.archived | boolean | Defaults to false. |
union.retentionDays | integer | May be null. Greater than 0. |
union.isSystemCreated | boolean | |
union.readOnly | boolean | |
union.fromDatasets | array of object | |
union.fromDatasets[].name | string | |
union.fromDatasets[].resourceName | string | |
union.fromDatasets[].resourceId | string | |
union.fromDatasets[].spaceId | string | Space containing the dependency dataset. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
union.detections | array of string | |
union.version | integer | May be null. Greater than 0. |
union.deleted | boolean | Defaults to false. |
union.changesetId | string | May be null. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
union.originKey | string | May be null. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
delete-union
Delete a union.
Deletes a union, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint true, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
unionId | string | Required | The ID of the union to delete. Pattern: ^ION_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
create-connector
Create a connector.
Creates a new connector, staging the change in a draft changeset.
Creates the resource in the active chat's space.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
name | string | Required | |
deploy | boolean | Required | |
type | enum | Required | One of ObjectStorageConnector, ApiPollingConnector, StreamingConnector, HttpSourceConnector. |
config | object (four variants) | Required | |
config[ObjectStorageConnector].type | string | Required | Always ObjectStorageConnector. |
config[ObjectStorageConnector].initialLookbackDays | integer | Optional | Greater than 0. Defaults to 14. |
config[ObjectStorageConnector].scanIntervalMinutes | integer | Optional | Minimum 5. |
config[ObjectStorageConnector].bucket | string | Required | Constrained by a pattern; see the schema in tools/list. At most 63 characters. |
config[ObjectStorageConnector].prefix | string | Required | |
config[ObjectStorageConnector].region | string | Optional | Defaults to not-used. |
config[ObjectStorageConnector].manageBucketNotifications | boolean | Optional | |
config[ObjectStorageConnector].objectStore | object | Required | |
config[ObjectStorageConnector].objectStore.auth | object | Required | Nested fields omitted; see the schema in tools/list. |
config[ApiPollingConnector].type | string | Required | Always ApiPollingConnector. |
config[ApiPollingConnector].connectorKind | string | Required | Catalog connector kind (e.g. "google-workspace", "gcp-pubsub") or "custom" for a customer ECR image. Must not be empty. |
config[ApiPollingConnector].credentialIds | map of string | Optional | |
config[ApiPollingConnector].intervalMinutes | integer | Required | Minimum 1. |
config[ApiPollingConnector].initialLookbackDays | integer | Optional | Greater than 0. |
config[ApiPollingConnector].settings | object | Required | |
config[ApiPollingConnector].ecrImageUrl | string | Optional | ECR image URL for a custom connector Lambda container. Must not be empty. |
config[StreamingConnector].type | string | Required | Always StreamingConnector. |
config[StreamingConnector].connectorKind | string | Required | Catalog connector kind (e.g. "google-workspace", "gcp-pubsub") or "custom" for a customer ECR image. Must not be empty. |
config[StreamingConnector].credentialIds | map of string | Optional | |
config[StreamingConnector].settings | object | Required | |
config[StreamingConnector].ecrImageUrl | string | Optional | ECR image URL for a custom connector Lambda container. Must not be empty. |
config[HttpSourceConnector].type | string | Required | Always HttpSourceConnector. |
config[HttpSourceConnector].authMode | enum | Required | One of bearer, presigned, hmac. |
config[HttpSourceConnector].credentialId | string | Optional | Pattern: ^CRD_[A-Z0-9]{1,7}$. |
datasetKind | enum | Optional | One of event, state. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
id | string | The ID of the created connector. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
update-connector
Update a connector.
Updates an existing connector, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint false, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
name | string | Optional | |
deploy | boolean | Optional | |
type | enum | Optional | One of ObjectStorageConnector, ApiPollingConnector, StreamingConnector, HttpSourceConnector. |
config | object (four variants) | Optional | |
config[ObjectStorageConnector].type | string | Required | Always ObjectStorageConnector. |
config[ObjectStorageConnector].initialLookbackDays | integer | Optional | Greater than 0. Defaults to 14. |
config[ObjectStorageConnector].scanIntervalMinutes | integer | Optional | Minimum 5. |
config[ObjectStorageConnector].bucket | string | Required | Constrained by a pattern; see the schema in tools/list. At most 63 characters. |
config[ObjectStorageConnector].prefix | string | Required | |
config[ObjectStorageConnector].region | string | Optional | Defaults to not-used. |
config[ObjectStorageConnector].manageBucketNotifications | boolean | Optional | |
config[ObjectStorageConnector].objectStore | object | Required | |
config[ObjectStorageConnector].objectStore.auth | object | Required | Nested fields omitted; see the schema in tools/list. |
config[ApiPollingConnector].type | string | Required | Always ApiPollingConnector. |
config[ApiPollingConnector].connectorKind | string | Required | Catalog connector kind (e.g. "google-workspace", "gcp-pubsub") or "custom" for a customer ECR image. Must not be empty. |
config[ApiPollingConnector].credentialIds | map of string | Optional | |
config[ApiPollingConnector].intervalMinutes | integer | Required | Minimum 1. |
config[ApiPollingConnector].initialLookbackDays | integer | Optional | Greater than 0. |
config[ApiPollingConnector].settings | object | Required | |
config[ApiPollingConnector].ecrImageUrl | string | Optional | ECR image URL for a custom connector Lambda container. Must not be empty. |
config[StreamingConnector].type | string | Required | Always StreamingConnector. |
config[StreamingConnector].connectorKind | string | Required | Catalog connector kind (e.g. "google-workspace", "gcp-pubsub") or "custom" for a customer ECR image. Must not be empty. |
config[StreamingConnector].credentialIds | map of string | Optional | |
config[StreamingConnector].settings | object | Required | |
config[StreamingConnector].ecrImageUrl | string | Optional | ECR image URL for a custom connector Lambda container. Must not be empty. |
config[HttpSourceConnector].type | string | Required | Always HttpSourceConnector. |
config[HttpSourceConnector].authMode | enum | Required | One of bearer, presigned, hmac. |
config[HttpSourceConnector].credentialId | string | Optional | Pattern: ^CRD_[A-Z0-9]{1,7}$. |
datasetKind | enum | Optional | One of event, state. |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
connectorId | string | Required | The ID of the connector to update. Pattern: ^CON_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
connector | object | |
connector.name | string | The name of the connector in schema.name format. |
connector.type | enum | One of ObjectStorageConnector, ApiPollingConnector, StreamingConnector, HttpSourceConnector. |
connector.datasetKind | enum | One of event, state. |
connector.deploymentStatus | enum | One of UNDEPLOYED, DEPLOYED, FAILED, DEGRADED, DEPLOY_PENDING, DEPLOY_IN_PROGRESS, UPDATE_PENDING, UPDATE_IN_PROGRESS, REFRESH_IN_PROGRESS, ARCHIVED, CLEANUP_PENDING, CLEANUP_IN_PROGRESS. |
connector.id | string | Pattern: ^CON_[A-Z0-9]{1,7}$. |
connector.createdAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
connector.createdByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
connector.updatedAt | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
connector.updatedByUserId | string | May be null. Pattern: ^USR_[A-Z0-9]{1,7}$. |
connector.deploy | boolean | |
connector.organizationId | string | Pattern: ^ORG_[A-Z0-9]{1,7}$. |
connector.spaceId | string | Pattern: ^SPC_[A-Z0-9]{1,7}$. |
connector.config | object (four variants) | |
connector.config[ObjectStorageConnector].type | string | Always ObjectStorageConnector. |
connector.config[ObjectStorageConnector].initialLookbackDays | integer | Greater than 0. Defaults to 14. |
connector.config[ObjectStorageConnector].scanIntervalMinutes | integer | Minimum 5. |
connector.config[ObjectStorageConnector].bucket | string | Constrained by a pattern; see the schema in tools/list. At most 63 characters. |
connector.config[ObjectStorageConnector].prefix | string | |
connector.config[ObjectStorageConnector].region | string | Defaults to not-used. |
connector.config[ObjectStorageConnector].manageBucketNotifications | boolean | |
connector.config[ObjectStorageConnector].objectStore | object | Nested fields omitted; see the schema in tools/list. |
connector.config[ApiPollingConnector].type | string | Always ApiPollingConnector. |
connector.config[ApiPollingConnector].connectorKind | string | Catalog connector kind (e.g. "google-workspace", "gcp-pubsub") or "custom" for a customer ECR image. Must not be empty. |
connector.config[ApiPollingConnector].credentialIds | map of string | |
connector.config[ApiPollingConnector].intervalMinutes | integer | Minimum 1. |
connector.config[ApiPollingConnector].initialLookbackDays | integer | Greater than 0. |
connector.config[ApiPollingConnector].settings | object | |
connector.config[ApiPollingConnector].ecrImageUrl | string | ECR image URL for a custom connector Lambda container. Must not be empty. |
connector.config[StreamingConnector].type | string | Always StreamingConnector. |
connector.config[StreamingConnector].connectorKind | string | Catalog connector kind (e.g. "google-workspace", "gcp-pubsub") or "custom" for a customer ECR image. Must not be empty. |
connector.config[StreamingConnector].credentialIds | map of string | |
connector.config[StreamingConnector].settings | object | |
connector.config[StreamingConnector].ecrImageUrl | string | ECR image URL for a custom connector Lambda container. Must not be empty. |
connector.config[HttpSourceConnector].type | string | Always HttpSourceConnector. |
connector.config[HttpSourceConnector].authMode | enum | One of bearer, presigned, hmac. |
connector.config[HttpSourceConnector].credentialId | string | Pattern: ^CRD_[A-Z0-9]{1,7}$. |
connector.readOnly | boolean | |
connector.isSystemCreated | boolean | |
connector.runStatus | object (two variants) | |
connector.runStatus[variant 1].lastRun | object | May be null. Nested fields omitted; see the schema in tools/list. |
connector.runStatus[variant 1].activeRun | object | May be null. Nested fields omitted; see the schema in tools/list. |
connector.runStatus[variant 1].currentLag | number | May be null. |
connector.runStatus[variant 1].lagUnit | enum | One of milliseconds, messages. May be null. |
connector.runStatus[variant 2].lastRun | object | May be null. Nested fields omitted; see the schema in tools/list. |
connector.runStatus[variant 2].activeRun | object | May be null. Nested fields omitted; see the schema in tools/list. |
connector.manifestCoverage | object | |
connector.manifestCoverage.from | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
connector.manifestCoverage.to | string | JavaScript Date or other runtime timestamp in tool results. Format: date-time. Constrained by a pattern; see the schema in tools/list. |
connector.manifestCoverage.complete | boolean | |
connector.version | integer | May be null. Greater than 0. |
connector.deleted | boolean | Defaults to false. |
connector.changesetId | string | May be null. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
connector.changesetStatus | enum | One of Unchanged, Added, Modified, Deleted. May be null. |
connector.originKey | string | May be null. |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
delete-connector
Delete a connector.
Deletes a connector, staging the change in a draft changeset.
Annotations: readOnlyHint false, destructiveHint true, idempotentHint false.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
connectorId | string | Required | The ID of the connector to delete. Pattern: ^CON_[A-Z0-9]{1,7}$. |
changesetId | string | Optional | Pattern: ^CHG_[A-Z0-9]{1,7}$. |
baseVersion | integer | Optional | |
spaceId | string | Required | The ID of the space to target for this operation. Pattern: ^SPC_[A-Z0-9]{1,7}$. |
Outputs
| Field | Type | Description |
|---|---|---|
changesetId | string | The exact changeset containing this mutation. Pattern: ^CHG_[A-Z0-9]{1,7}$. |
validation | object | |
validation.valid | boolean | |
validation.errors | array of object | |
validation.errors[].resourceId | string | |
validation.errors[].resourceKind | string | |
validation.errors[].resourceName | string | |
validation.errors[].message | string | |
validation.errors[].field | string | |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
list-connector-names
List connector names.
Lists the names of all connectors in the catalog.
Annotations: readOnlyHint true, idempotentHint true.
Inputs
This tool takes no arguments.
Outputs
| Field | Type | Description |
|---|---|---|
connectorNames | array of string | |
links | array of object (three variants) | |
links[][resource].type | string | Always resource. |
links[][resource].id | string | |
links[][resource].resourceKind | enum | One of CaseAlertBlock, Alert, AiProvider, Case, CaseAnalysisBlock, CaseLogBlock, CaseNoteBlock, CaseResponseActionBlock, Changeset, Chat, Comment, Connector, ContentPack, ContentPackInstallation, ContentWorkItem, Credential, Dashboard, DataPlane, Detection, Folder, HttpToolConfig, Integration, Lookup, Mapper, McpConfig, Organization, Parser, ResourceGroup, Role, Schema, Skill, Space, Table, ThreatReport, Union, User, View, WebhookConfig. |
links[][resource].link | string | Canonical URL for this result. Format: uri. |
links[][changeset].type | string | Always changeset. |
links[][changeset].id | string | |
links[][changeset].link | string | Canonical URL for this result. Format: uri. |
links[][query].type | string | Always query. |
links[][query].id | string | |
links[][query].link | string | Canonical URL for this result. Format: uri. |
Related
- MCP access, the surface these tools are registered on.
- Dataset resources, the category these tools write.
- Tables, Views, Unions, and Connectors, the resources.