local_ydb_permissions
Destructive
List and modify YDB scheme permissions for a path. Supports grant, revoke, set, clear, chown, and inheritance changes with plan-first safety for mutations.
Instructions
Inspect or change YDB scheme permissions for a path. The default list action is read-only; grant, revoke, set, clear, chown, and inheritance changes return a plan unless confirm=true.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | Named profile from local-ydb.config.json. Defaults to config.defaultProfile. | |
| configPath | No | Explicit local-ydb config file path to load for this tool call. Useful when the MCP server should pick up a different config without restart. | |
| action | No | Permissions operation to run. Defaults to list, which is read-only and does not require confirm. | |
| path | No | Scheme path to manage. Defaults to the configured tenant root. | |
| subject | No | User or group subject for grant, revoke, and set actions. | |
| permissions | No | Permission names for grant, revoke, and set actions. Each item is passed as its own -p argument. | |
| owner | No | New owner for action=chown. | |
| maxOutputBytes | No | For action=list, maximum UTF-8 bytes returned per stdout/stderr stream. Defaults to 65536. | |
| confirm | No | Must be true to execute mutating actions. Omit or false for plan-only output. Not required for action=list. |