Start here for self-contained WhoDB MCP guidance and setup, without skills or shell access. inspect returns settings/schema/choices; preview validates a patch without saving; apply saves only a token-bound, user-approved preview; verify checks active targets. Restart after changes. Never send credentials.

Run a hosted platform resource action through the selected project.

Supported actions include transform run/cancel_run, file upload/rename/move/promote_to_dataset/restore/purge, folder rename/move/restore/purge, function deploy/redeploy/execute/start_run/generate_test_input, function_run cancel, ontology add_records/execute_behavior/share/unshare/reembed/purge_data, dataset purge_data, project restore/purge, app restore/purge/generate/cancel_generation/file operations, object restore/purge/version restore, package installation and add_changelog/add_media/review, and organization administration including service accounts (create_service_account, create_service_account_key, revoke_service_account_key, delete_service_account) and teams. Read whodb://platform/schema for every action and its payload shape. Some actions create, move, deploy, or otherwise mutate hosted resources. Pass id and payload_json as required by the action. For file/upload, payload_json requires file_path and may include folderId. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Permission checks are enforced by the hosted platform. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Read the active production version for one versioned object. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Add one row to a hosted ontology backing table.

Values are keyed by ontology property. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Add many rows to a hosted ontology in one call.

rows are plain objects keyed by ontology property. Pass idempotency_key so a retried call never inserts duplicates. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List model names available from one hosted AI provider. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted AI provider metadata in the selected project. Use name and type filters when known.

This tool never returns provider API keys. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect one hosted app, including its generated definition. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Look up exact usage for one app component category returned by whodb_platform_app_components. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List exact app component documentation categories from the hosted builder. Call before using unfamiliar component types. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List the draft files of one hosted app: app.json, shared files, and every page, read one page per request so large apps fit. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Map a hosted draft's page events, scripts, bindings, state, navigation, overlays, and function contract issues using the in-app builder audit. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Read the generated files for one page of a hosted app. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Capture a rendered app page at desktop, mobile, or tablet size after optional actions or JavaScript. Returns a WebP image, visible text, diagnostics, and an optional interaction trace on compatible runtimes. Hosted writes are blocked. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Look up exact app SDK usage for one category returned by whodb_platform_app_sdks. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List exact app SDK documentation categories from the hosted builder. Call before writing data or function integration code. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Read a promoted hosted app version. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Read the current hosted app view and generated files. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List pages in a hosted app by ID or exact name. Use a returned page with whodb_platform_app_screenshot. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted ontology-powered apps in the selected project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return an end-to-end hosted platform build plan for a user goal.

Use this before coordinating a cross-resource workflow. It plans scope, ingest, persist, model, automate, runtime support, and governance phases using existing WhoDB platform terminology. It is read-only and never creates confirmation tokens. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Compare a project bundle against the selected hosted project.

Pass bundle_json from whodb_platform_bundle_export or the CLI resources export command. This is read-only and returns create/skip actions. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Export selected hosted project metadata as a portable bundle.

The bundle includes metadata for secrets, datasets, ontologies, transforms, functions, folders, and files. Secret values are never exported. File content is only exported when include_files is true and is capped by max_file_bytes. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Import a project bundle into the selected hosted project.

Use whodb_platform_bundle_import_plan first when possible. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the import preview. Supports prefix, rename_conflicts, and overwrite_conflicts. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Plan how a project bundle would import into the selected hosted project.

This MCP tool is intentionally plan-only. Use the CLI resources import --yes command for execution after review. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Analyze direct graph impact for a planned change.

Pass resource, id, and optional action before update, delete, deploy, run, move, or promotion work. It returns directly connected resources and recommended reads; it does not execute any change. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Clone a hosted dataset, ontology, transform, or function in the selected project.

Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Confirm and execute a pending hosted WhoDB platform write.

Use the confirmation_token returned by hosted platform write tools. Tokens expire after 5 minutes. Only call this after the user has approved the pending write preview. The token does not independently prove human approval: the MCP host must enforce approval if that guarantee is required. For uploads, review the full local source path and destination; the file is read at execution time, not snapshotted when the preview is created. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Create a hosted platform resource through the selected project.

Supported resources: secret, ai_provider, ontology, ontology_fast_lookup, ontology_reference, dataset, transform, folder, function, app, package, lineage_provider, source_object. Pass payload_json as a JSON object matching the hosted platform mutation input. The selected projectId is injected automatically when applicable. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Permission checks are enforced by the hosted platform. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Create a hosted dataset through the selected project.

Use this typed wrapper for normal dataset creation instead of raw whodb_platform_create when possible. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Create a fast lookup for one hosted ontology.

Pass ontology property names in fields. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Summarize selected-project data-model resources.

Use this before ontology, dataset, or lineage work. It returns sources, datasets, ontologies, graph relationships, modeling gaps, and the read tools an agent should call next. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect one hosted dataset by id. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview rows for one hosted dataset.

Results are capped by the requested limit and the MCP --max-rows setting when provided. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List datasets in the selected hosted project. Use name and schema_mode filters when known. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Delete a hosted platform resource through the selected project.

Supported resources: secret, ai_provider, ontology, ontology_fast_lookup, ontology_reference, dataset, transform, file, folder, function, app, lineage_provider, source_object. This is destructive. Pass id for normal resources. For source_object, pass payload_json with sourceId, ref, and values. Default mode returns a confirmation token; explain exactly what will be deleted and do not call whodb_platform_confirm until the user approves the preview. Permission checks are enforced by the hosted platform. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Delete one hosted ontology fast lookup by id.

Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Delete one hosted ontology row.

Pass values that identify the row, usually the primary key property. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List restorable hosted resources visible to the signed-in user. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect hosted dependents, references, and shared resources before deletion. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List ontologies other projects share that the selected project may reference. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Check hosted WhoDB MCP readiness.

Use this when platform tools fail or before a workflow. It reports login, selected workspace, manifest availability, and actionable warnings. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect one hosted tabular file and infer promote-to-dataset column mappings.

Use this before whodb_platform_action with resource "file" and action "promote_to_dataset". Prefer fields such as ["columns", "columnMapExample", "columnMapFlags"] first. Set include_rows only when sample row values are needed. The suggested mappings are convenience output; the hosted platform still validates promotion writes. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview one hosted project file.

Prefer fields such as ["mimeType", "sizeBytes", "isTabular"] before requesting body fields. Request "textContent" or "tabular" only when the file body or rows are needed. Text content is capped in MCP output. Tabular previews are returned as provided by the hosted platform. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Search files in the selected hosted project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List folders and files in a hosted project folder.

Omit folder_id to list the project root. Use name, kind, and mime_type filters when known. Prefer fields such as ["files", "folders"] or ["storageUsed"] to request only the folder data needed now. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect one ontology function by id.

Prefer fields to request only the details needed now, for example ["id", "name", "description"]. Request heavier fields such as "files" only when source code is needed. Function source file content is capped in MCP output. Secret bindings include secret ids only, never secret values. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return one persisted function run by run_id, or list recent runs for one function by function_id. Runs come from the function start_run action; each carries status, output, logs and error. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Wait for a persisted hosted function run to complete, fail or be canceled, then return its output, logs and error. Use the run id returned by the function start_run action and keep the timeout bounded; a run keeps going after a timed-out wait. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List ontology functions in the selected hosted project.

Use name, type, and deployed filters when known; type maps to language for this tool. Prefer fields such as ["id", "name", "description", "isDeployed"] for discovery. Request heavier fields such as "files" only when source code is needed. Function source file content is capped in MCP output. Secret bindings include secret ids only, never secret values. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return a goal-aware gap analysis for the selected hosted project.

Use this when the agent needs to explain what is missing before building an app, data product, ontology workflow, transform pipeline, or AI-backed function. It returns ready areas, gaps, suggested tools, and next actions. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List saved platform hosts and account metadata without contacting servers. Saved credentials may have expired; status checks the selected login. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return lineage around one root node in the selected hosted project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return immediate lineage neighbors for one node in the selected hosted project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List OpenLineage providers configured for the selected project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List the signed-in user's hosted resource grants. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return deterministic suggested next actions for the selected hosted project.

Use this as a deeper action-ranking view after whodb_platform_workspace_summary or whodb_platform_gap_analysis. Suggestions are advisory only; backend permissions and write confirmations still apply. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List promoted versions for an app, function, transform, dataset, or ontology. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List ontology object types in the selected hosted project. Use name and status filters when known. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect one ontology object type by id. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List recorded behavior action executions for one record, newest first, including status and result summary. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview a behavior action without executing it: whether it is allowed, the proposed changes and the events it would emit. Show the preview to the user, then execute with whodb_platform_action execute_behavior. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Compute exact SQL aggregates (COUNT, SUM, AVG, MIN, MAX) over one ontology, optionally grouped and filtered.

Pass group_by for one row per group and metrics for the values; omit group_by for a single total row. where uses the same grammar as whodb_platform_ontology_query (for example {"status":"open","amount":{"gte":100}}); a raw platform WhereCondition object is also accepted. Prefer this over whodb_platform_ontology_query when exact totals matter or the entity is large. Results are capped by limit and the MCP --max-rows setting. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Describe ontologies in plain text plus structured entities, fields and relationships. Call this first when answering a data question so property names and links are known. Empty entities describes the whole project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List embedding backfill jobs for one ontology with progress and errors. Use after whodb_platform_action reembed and before whodb_platform_ontology_similar. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List suggested fast lookups for one ontology object type. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List saved fast lookups for one ontology object type. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Follow one ontology link from a row primary key and preview linked rows.

Results are capped by the requested limit and the MCP --max-rows setting when provided. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Query ontology rows with filters, search, joins, grouping and metrics. Use this to answer data questions instead of paging through whodb_platform_ontology_rows.

where grammar: {"status":"open"}, {"amount":{"gte":100}}, {"_or":[{"region":"EU"},{"region":"UK"}]}. Operators: eq, neq, gt, gte, lt, lte, contains, icontains, isnull. group_by + metrics (count, count_distinct, sum, avg, min, max) return one row per group. The server scans at most scan_limit rows (default 1000, max 5000) before filtering, so totals on large entities may be partial; use whodb_platform_ontology_aggregate for exact SQL totals. Policy-protected ontologies reject this query; fall back to whodb_platform_ontology_rows. Results are capped by limit and the MCP --max-rows setting. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Report which properties the signed-in user can read and write on an ontology record and which behavior actions are allowed, with denial codes. Call before writing or executing actions. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Count links, apps, functions, transforms and behaviors that depend on one ontology reference before removing it. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List shared ontologies referenced by the selected project and their status. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview rows for one ontology object type.

Results are capped by the requested limit and the MCP --max-rows setting when provided. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Find rows similar to one row using the ontology's embeddings. Requires embeddingEnabled on the ontology and a completed embedding job; otherwise the platform returns an error explaining what is missing. Start a backfill with whodb_platform_action reembed. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return min, max, total and non-null counts for one ontology property, optionally filtered with the shared where grammar. Cheap way to profile a column before querying. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List domains configured for the selected organization. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List members of the selected organization. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List package installations across the selected organization, optionally for one package. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List resources visible in the selected organization. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List SSO providers configured for the selected organization without client secrets. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted WhoDB organizations visible to the authenticated user.

Use this after whodb login to discover valid organization ids, slugs, and names before selecting a workspace. This tool is read-only. Prefer fields such as ["id", "name", "slug", "selected"] for discovery. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect one hosted package and its requirements. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Check whether a package installation has an update. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted package installations in the selected project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Search packages shared with the organization or available through the package library. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted package versions available in the selected project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List pending hosted WhoDB platform writes awaiting confirmation.

Use this to recover confirmation tokens returned by hosted platform write tools. Preview output contains metadata and changed field names only; it never includes credential or secret values. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview package contents and validation issues before creating a package. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview package import contents, requirements, and conflicts. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview package installation contents, requirements, and conflicts. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview import of a shared package. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview installation of a shared package. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Read the selected project's resource access matrix. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List active production versions in the selected project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Create a hosted WhoDB project in an organization.

Pass org when the selected organization is not the intended target. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the project creation. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Delete a hosted WhoDB project.

This is destructive. Pass project as id, slug, or name and org when needed for disambiguation. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user explicitly approves the deletion. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return a compact health summary for the selected hosted project.

Use this for readiness diagnostics after whodb_platform_workspace_summary or whodb_platform_gap_analysis. It combines project counts, readiness checks, warnings, selected scope, and top suggested next actions. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return project-level lineage for the selected hosted project. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Rename a hosted WhoDB project.

Pass project as id, slug, or name and org when needed for disambiguation. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the rename. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Summarize resources in the selected project for governance and deletion planning. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted WhoDB projects in one organization.

Pass org as an organization id, slug, or name. If omitted, the selected organization is used when available; when the account has exactly one organization, that organization is used. This tool is read-only. Prefer fields such as ["id", "name", "slug", "selected"] for discovery. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Promote a hosted project file to a dataset.

Use whodb_platform_file_inspect first to infer column_map values. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Resolve a hosted resource name or id to an exact project resource before reading, planning, or writing it. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List subjects with access to a hosted resource. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return a normalized graph of hosted platform resources and relationships in the selected project.

Use this when an agent needs to understand how sources, datasets, files, ontologies, functions, secrets, AI providers, and lineage relate before proposing changes. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List the signed-in user's permissions for a hosted resource. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted resource ids the signed-in user can access for a resource type. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Restore a soft-deleted hosted resource through the platform's existing restore path. This never purges data and still requires confirmation. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Summarize selected-project runtime readiness.

Use this before function, transform, AI provider, or secret work. It returns runtime resources, deployment/readiness checks, and warnings without exposing secret values. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted project secret metadata and usage. Use name to filter by secret name when known.

This tool never returns secret values, redacted placeholders, or credential material. Authorization is enforced by the hosted platform. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List service accounts and key metadata in the selected organization. Keys never include secrets. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Clear the session default set by whodb_platform_session_use.

Later calls that omit workspace fall back to process overrides, then saved CLI defaults. Nothing is written to the CLI config.

Set the default host, organization, and project for this MCP session only.

Pass workspace {host, org, project}. The login is verified and the target is resolved to canonical IDs; later calls that omit workspace use it. Nothing is written to the CLI config, so other chats, terminals, and MCP sessions are unaffected. Use this once at the start of a chat that should stay on one host (for example UAT or production), then call whodb_platform_status to confirm. An explicit workspace on a later call still overrides it for that call. Call whodb_platform_session_clear to return to process/saved defaults. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Check hosted WhoDB MCP setup before auth-dependent tools.

Use this as the first tool in hosted platform mode, or whenever another platform tool reports login/workspace errors. It does not require a valid hosted session. It reports whether the local CLI is logged in, whether an organization/project is selected, and exact commands the user can run to fix setup. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List resources that must be shared alongside a resource for it to work, with the default role for each. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List resources shared by the signed-in user. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List ontologies the selected project shares with other projects, including their consumers. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect a package shared through a hosted package share token. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List resources shared with the signed-in user. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Describe columns for one hosted WhoDB source object.

Use a source name or id and an object ref such as table:public.users. This tool is read-only. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return redacted connection configuration for one hosted WhoDB source.

Secrets such as passwords, tokens, client secrets, and private keys are masked. Use this to understand source shape without exposing credentials. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Describe editable field constraints for one hosted source object.

Use a source name or id and an object ref such as table:public.users. This tool is read-only. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Read content for one hosted source object when the source supports content reads.

Use a source name or id and an object ref such as item:notes/report.txt. Prefer fields to request only the content metadata or body fields needed now, then call again with more fields only if needed. Text content is capped in MCP output. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Prepare creation of a hosted WhoDB source in the selected project.

This stores nothing until the returned confirmation token is approved with whodb_platform_confirm. Pass source_type, name, connection fields, and advanced options. Do not call whodb_platform_confirm until the user approves the confirmation preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Prepare deletion of a hosted WhoDB source.

This deletes nothing until the returned confirmation token is approved with whodb_platform_confirm. Use whodb_platform_sources first to verify the target source. This is destructive. Explain the deletion target and do not call whodb_platform_confirm until the user approves the confirmation preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List connection fields for one hosted WhoDB source type.

Use this before source creation or draft connection tests to discover required fields and defaults. This tool is read-only and does not expose credentials. Prefer fields such as ["Key", "Kind", "Required", "LabelKey"] unless full field metadata is needed. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Browse objects in one hosted WhoDB source.

Use the source name or id from whodb_platform_sources. Parent refs use kind:path, for example schema:public. This tool is read-only. Prefer fields such as ["Name", "Kind", "HasChildren"] while browsing. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Preview rows for one hosted WhoDB source object.

Use a source name or id and an object ref such as table:public.users. Results are capped by the requested limit and the MCP --max-rows setting when provided. This tool is read-only. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Test a hosted WhoDB source connection.

Pass source to test an existing saved source. Omit source and pass source_type plus connection fields to test a draft config without saving it. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted WhoDB source types available for source creation.

Use this before whodb_platform_source_create or draft whodb_platform_source_test to discover valid source_type values. This tool is read-only. Prefer fields such as ["id", "label"] before requesting full source type metadata. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Prepare update of a hosted WhoDB source.

This changes nothing until the returned confirmation token is approved with whodb_platform_confirm. Omitted config fields preserve the existing hosted values. Do not call whodb_platform_confirm until the user approves the confirmation preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted WhoDB sources in the selected organization and project.

Requires a saved login on the target host. Pass workspace {host, org, project}, or omit it to use process/saved defaults. This tool is read-only and never exposes source credentials. Prefer fields such as ["id", "name", "type"] for discovery; request more fields only when needed. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Report the current hosted WhoDB login and selected hosted workspace.

Requires a prior hosted login with whodb login. Use this before other whodb_platform_* tools to confirm which host, organization, and project are active. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return selected hosted project storage usage in bytes. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List hosted project files that can be used as tabular data. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List members of one organization team. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List organization teams. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Inspect one transform in the selected hosted project. Use fields to request only the top-level fields needed for the current task. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Run a transform graph without saving it and return the resulting rows. Use to validate a graph before whodb_platform_create transform or whodb_platform_action run. Results are capped by the MCP --max-rows setting. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List recent runs for one hosted transform. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Wait for a real hosted transform run to reach success or failure. Use the run id returned by whodb_platform_action and keep the timeout bounded. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List transforms in the selected hosted project. Use name and type filters when known; type maps to trigger mode for this tool. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Update a hosted platform resource through the selected project.

Supported resources: secret, ai_provider, ontology, dataset, transform, function, app, lineage_provider, source_object. Pass id when required and payload_json with changed fields only. Secret-like payload fields are never shown in confirmation previews. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Permission checks are enforced by the hosted platform. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Update one hosted ontology row.

Pass values containing both matcher values and replacement values, plus update_columns naming the properties to update. Default mode returns a confirmation token; do not call whodb_platform_confirm until the user approves the preview. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List resources owned by one organization member, for example before removing them. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List resources one organization member can access and how that access was granted. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Request confirmation to apply or resume a hosted WhoDB workflow plan. Completed steps are skipped on retry. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Read one hosted WhoDB workflow plan and its step status without returning payload values. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

List persisted hosted WhoDB workflow plans for the selected workspace. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Validate and persist a multi-step hosted WhoDB workflow without executing writes. Use this for end-to-end goals such as source to dataset to transform to app. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return a goal-oriented, read-first recipe for using the hosted WhoDB platform. This never executes writes; use its steps to build and apply a confirmed workflow. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return a compact selected-project map across hosted sources, secrets, AI providers, datasets, ontologies, transforms, functions, root files, storage, and lineage.

Use this when the agent needs a full resource inventory after first checking whodb_platform_workspace_summary. It is read-only and never returns secret values. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Resolve workspace {host, org, project} to canonical IDs and verify the login. Does not switch or save defaults. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Return a compact, goal-aware summary of the selected hosted project.

Use this when the user asks what the platform project contains or what can be built. It combines scope, counts, highlights, gaps, next actions, recommended tools, warnings, and lineage summary without drilling into every item. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Validate and preview a hosted platform write without executing it.

Use this before calling mutating tools when the agent needs a safe dry-run summary. It reuses the same generic write specs as real writes, returns payload keys, suggested reads, and direct impact, but does not create a confirmation token. Accepts workspace {host, org, project} for per-call targeting without changing defaults.