motherduck.query_rw critical conf mediumhuman approval
Runs arbitrary read-write SQL, so a single call can drop tables, truncate warehouse data, or rewrite records across every database the credential reaches, with no recovery path.
motherduck.query critical conf mediumhuman approval
Runs arbitrary SELECT statements across the account's warehouses, enabling bulk extraction of customer, employee, and transaction records in a single call.
motherduck.update_flight critical conf mediumhuman approval
Rewrites a scheduled job's code, token, and secrets in one call, letting a single principal repoint production automation at attacker-controlled credentials without review.
motherduck.delete_flight critical conf mediumhuman approval
Destroys a scheduled job together with its version history and run records, erasing the execution audit trail for production data pipelines.
motherduck.share_dive_data high conf mediumOBO
Exposes a Dive's underlying result data to everyone in the organization, widening the audience for warehouse rows that may contain customer or employee personal data.
motherduck.set_guide_access high conf mediumOBO
Flips a Guide between private and org-wide, either publishing internal data guidance to the whole organization or silently removing guidance other teams' agents depend on.
motherduck.create_flight high conf mediumhuman approval
Deploys new Python code on a recurring schedule inside the account, standing up production automation with no separate review or approval step.
motherduck.edit_flight_source high conf mediumhuman approval
Rewrites the code of an existing scheduled job through find-and-replace, changing what production automation does on its next run without a review gate.
motherduck.delete_dive high conf mediumOBO
Permanently removes a saved analysis app and its component code, with no recovery path for the queries and logic other teams may depend on.
All other tools (12)
motherduck.cancel_flight_run medium conf mediumaudit
Halts a running pipeline mid-execution, which can leave partially written tables and skip a scheduled data refresh downstream consumers rely on.
motherduck.create_guide medium conf mediumaudit
Adds instructions that steer how AI agents interpret and answer the organization's data questions, shaping analytical output for every downstream user.
motherduck.delete_guide medium conf mediumaudit
Withdraws org-wide query guidance so agents fall back to unguided SQL; version history is preserved, so the removal can be reversed.
motherduck.edit_guide_content medium conf mediumaudit
Rewrites portions of the guidance agents follow when querying company data, a direct path to skewing reported numbers or injecting instructions into agent context.
motherduck.get_flight_run_logs medium conf mediumaudit
Returns raw pipeline logs, which routinely echo sampled row values, connection details, and error payloads from the data the job processed.
motherduck.run_flight medium conf mediumaudit
Executes a Flight's Python code immediately, which may write to warehouse tables or call external systems outside its normal schedule.
motherduck.save_dive low conf mediumallow
Adds a new saved analysis app to the workspace; contents are reversible and visible only until explicitly shared.
motherduck.search_catalog low conf mediumallow
Surfaces database, table, and column names across the whole account, mapping where sensitive data lives without returning the rows themselves.
motherduck.update_dive medium conf mediumaudit
Rewrites an existing Dive's content, silently changing the queries and figures colleagues read from a shared analysis.
motherduck.update_guide medium conf mediumaudit
Publishes a new version of agent-facing data guidance; the change takes effect for every agent query without a separate approval step.
motherduck.update_guide_metadata low conf mediumallow
Retitles or re-topics a Guide, affecting how agents and people find it but leaving its actual guidance untouched.
motherduck.view_dive medium conf mediumaudit
Renders a Dive as a live app in the client, executing its embedded queries and pulling warehouse results into the conversation surface.