Skip to main content
Glama
This connector has been deprecated

Duplicate listing of the same server under an old namespace. The maintained listing is Layero (ru.layero/layero): same endpoint https://mcp.layero.ru/mcp, current description and tools. The landing-page generator described here was removed in MCP 2.0.

Data API базы: проба метода

data_api_probe

A real request to a method through the gateway — as a visitor, a user or the server.

The platform supplies the key and the token. Writes (POST, PATCH, DELETE,
a function call) are rolled back: rows in the database do not change,
but the rollback does not undo sequence numbers, calls from the database
to the outside, session locks or the daily call quota. The answer is
real: grants, row policies and refusals are the same the site will see.
Needs a token with the admin scope.

Input Schema

NameRequiredDescriptionDefault
bodyNoBody for POST and PATCH.
pathYesPath from the database address: `/rest/v1/products`, `/rest/v1/rpc/order_create` or `/whoami` (GET only). Files, without writing anything: POST `/storage/v1/object/list/<bucket>`, GET `/storage/v1/object/info/<bucket>/<path>`, POST `/storage/v1/object/sign/<bucket>/<path>` (may read?), POST `/storage/v1/object/upload/sign/<bucket>/<path>` (may upload?).
roleNoOn whose behalf: visitor — a visitor with the public key, user — a signed-in user (needs user_id), server — the secret key.visitor
queryNoQuery parameters, PostgREST style: {"select": "id,title", "price": "gt.100"}.
methodYesHTTP method.
schemaNoThe table's schema: api, public or app. Without it the name is looked up in the order api → public → app — pass it when tables with the same name exist in several schemas. Not needed for functions and /whoami.
user_idNoFor role=user: id of the app user.
databaseNoThe database: name, slug or id. Without it — the organization's only database with the Data API enabled.
organizationNoOrganization slug. Without it — the only one, or the personal one.

Output Schema

NameRequiredDescriptionDefault
bodyNo
rowsNo
totalNo
callerNo
statusNo
requestYes
databaseYes
elapsed_msNo
next_actionYes
owner_totalNo
rolled_backNo
organizationYes
body_shortenedNo
body_truncatedNo
rollback_expectedNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / properties / path / description
      Previous value: -"Path from the database address: `/rest/v1/products`, `/rest/v1/rpc/order_create` or `/whoami` (GET only)."New value: +"Path from the database address: `/rest/v1/products`, `/rest/v1/rpc/order_create` or `/whoami` (GET only). Files, without writing anything: POST `/storage/v1/object/list/<bucket>`, GET `/storage/v1/object/info/<bucket>/<path>`, POST `/storage/v1/object/sign/<bucket>/<path>` (may read?), POST `/storage/v1/object/upload/sign/<bucket>/<path>` (may upload?)."
  2. Changed9 schema fields changed
    • changedInput schema / properties / body / description
      Previous value: -"Тело для POST и PATCH."New value: +"Body for POST and PATCH."
    • changedInput schema / properties / database / description
      Previous value: -"База: имя, слаг или id. Без него — единственная база организации с включённым Data API."New value: +"The database: name, slug or id. Without it — the organization's only database with the Data API enabled."
    • changedInput schema / properties / method / description
      Previous value: -"HTTP-метод."New value: +"HTTP method."
    • changedInput schema / properties / organization / description
      Previous value: -"Организация (слаг). Без него — единственная или личная."New value: +"Organization slug. Without it — the only one, or the personal one."
    • changedInput schema / properties / path / description
      Previous value: -"Путь от адреса базы: `/rest/v1/products`, `/rest/v1/rpc/order_create` или `/whoami` (только GET)."New value: +"Path from the database address: `/rest/v1/products`, `/rest/v1/rpc/order_create` or `/whoami` (GET only)."
    • changedInput schema / properties / query / description
      Previous value: -"Параметры запроса как у PostgREST: {\"select\": \"id,title\", \"price\": \"gt.100\"}."New value: +"Query parameters, PostgREST style: {\"select\": \"id,title\", \"price\": \"gt.100\"}."
    • changedInput schema / properties / role / description
      Previous value: -"От чьего имени: visitor — посетитель с публичным ключом, user — вошедший пользователь (нужен user_id), server — секретный ключ."New value: +"On whose behalf: visitor — a visitor with the public key, user — a signed-in user (needs user_id), server — the secret key."
    • changedInput schema / properties / schema / description
      Previous value: -"Схема таблицы: api, public или app. Без неё имя ищется по порядку api → public → app — указывай, когда одноимённые таблицы есть в нескольких схемах. Функциям и /whoami не нужна."New value: +"The table's schema: api, public or app. Without it the name is looked up in the order api → public → app — pass it when tables with the same name exist in several schemas. Not needed for functions and /whoami."
    • changedInput schema / properties / user_id / description
      Previous value: -"Для role=user: id пользователя приложения."New value: +"For role=user: id of the app user."
  3. Added

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Exceptional disclosure beyond the annotations: writes are rolled back, yet the rollback does not undo sequence numbers, outbound database calls, session locks, or the daily call quota — non-obvious side effects that annotations (destructiveHint=false) would otherwise hide. It also states the authorization prerequisite (admin-scope token, platform-supplied key) and that responses reflect real grants and row policies.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action in the first sentence, then side effects, then authorization. Six short sentences with no filler; the quota caveat earns its place because it is a real cost of an operation labelled non-destructive.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and the description covers auth, rollback semantics and identity roles for a 9-parameter tool. It stops at 4 because it never tells the agent to enumerate methods first or what happens when the scoping parameters (organization, database) are ambiguous, leaving that entirely to the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns above that by classifying POST/PATCH/DELETE/function calls as rolled-back writes and by naming the role dimension, which reinforces the method and role enums with consequences. It does not add format detail for path, query or schema, which the schema already handles thoroughly.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete action (execute a real request against a Data API method through the gateway) and the acting identities (visitor/user/server), which is clearly distinct from setup-style siblings like data_api_grant or data_api_origins. It does not explicitly contrast itself with data_api_methods or whoami, both of which are adjacent in purpose, so it stops short of full sibling differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the probe framing — you call it to see real grants, policies and refusals — but there is no explicit 'use this when…' or 'use X instead when…' statement, and no mention that data_api_methods should be consulted first to discover valid paths. The agent must infer positioning from the sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources