Fivetran MCP Server
OfficialServidor MCP de Fivetran
¿Actualizando desde la versión 0.2? Dos cosas cambiaron:
La selección de herramientas ahora se basa en el alcance. Ya no editas
server.pypara habilitar herramientas. El conjunto de herramientas disponible se deriva deFIVETRAN_SCOPEyDISALLOWED_ACTIONS. Consulta la tabla de variables de entorno en Configuración.
FIVETRAN_SCOPEreemplaza aFIVETRAN_ALLOW_WRITESpara gestionar permisos.FIVETRAN_ALLOW_WRITESsigue existiendo por compatibilidad con versiones anteriores. Ya no permite eliminaciones cuando se establece.
Un servidor MCP que puedes usar para interactuar con tu entorno de Fivetran. Te permite hacer preguntas de solo lectura como "¿cuándo fue la última vez que mi conexión de postgres completó una sincronización?" y "¿hay alguna de mis conexiones rota?". Establece FIVETRAN_SCOPE en read/write o read/write/delete para desbloquear operaciones de escritura y eliminación, y usa DISALLOWED_ACTIONS para crear excepciones a ese nivel (por ejemplo, system-keys:write,system-keys:delete para mantener la creación de credenciales fuera de los límites). El MCP te pedirá confirmación antes de realizar una operación de escritura o eliminación.
Plugins
Tenemos plugins que usan este servidor MCP para facilitar tareas complejas, compatibles con Claude Code y Codex. Cada plugin vive en su propio repositorio con su propio README.
copy-connections. Copia conexiones existentes de Fivetran a un nuevo destino. Mantén sus configuraciones y esquemas intactos o modifícalos como quieras.
Related MCP server: MCP Fivetran
Regeneración de archivos de esquema de API
El directorio open-api-definitions/ contiene archivos de esquema ligeros por endpoint utilizados por el servidor. Para regenerarlos a partir de una especificación OpenAPI actualizada:
python split_openapi_by_endpoint.py fivetran-open-api-definition.json open-api-definitionsEsto reemplazará los archivos de esquema existentes con los recién generados.
Configuración
1. Elige cómo ejecutar el servidor
Tienes dos opciones. La mayoría de los usuarios deberían usar uvx. No se requiere clonar.
Opción A: Ejecutar con uvx (recomendado)
Requiere uv (que proporciona uvx) y Python 3.10+. uvx obtiene y ejecuta el servidor directamente desde este repositorio, por lo que no hay nada que instalar o actualizar manualmente.
El comando que ejecutará tu cliente MCP es:
uvx --from git+https://github.com/fivetran/fivetran-mcp fivetran-mcpNota:
uvx fivetran-mcp(sin--from) no funciona. Los nombresfivetran-mcpymcp-fivetranen PyPI pertenecen a proyectos no relacionados, por lo que debes instalar desde la URL de git.
Opción B: Ejecutar desde un clon local (para desarrollo)
Usa esto si quieres modificar server.py o regenerar archivos de esquema.
git clone https://github.com/fivetran/fivetran-mcp
cd fivetran-mcp
python3 -m venv .venv
source .venv/bin/activate
pip install .Luego puedes apuntar tu cliente MCP a python /path/to/fivetran-mcp/server.py.
2. Obtén credenciales de API de Fivetran
Puedes generar credenciales dentro de https://fivetran.com/dashboard/user/api-config
3. Prepara tus variables de entorno
Antes de configurar cualquier cliente, decide los valores que pasarás al servidor. Cada configuración de cliente a continuación espera las mismas cuatro variables, así que determínalas una vez aquí y reutilízalas.
Variable | Requerida | Predeterminado | Descripción |
| Sí | - | Tu clave de API de Fivetran (del paso 2) |
| Sí | - | Tu secreto de API de Fivetran (del paso 2) |
| No |
| Uno de |
| No | (vacío) | Lista separada por comas de tokens |
| No |
| Indicador de compatibilidad con versiones anteriores de versiones anteriores. |
El servidor te pedirá confirmación antes de realizar cualquier operación de escritura o eliminación.
4. Conéctate a tu cliente de IA
Elige tu cliente de IA preferido a continuación y sigue las instrucciones de configuración. Cada fragmento usa las variables de entorno que preparaste en el paso 3. Introduce los valores que hayas decidido.
Claude Desktop
Abre Claude Desktop y ve a Configuración → Desarrollador → Editar configuración
Esto abre
claude_desktop_config.json. Agrega el servidor MCP de Fivetran:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Usando uvx (Opción A):
{
"mcpServers": {
"fivetran": {
"command": "uvx",
"args": ["--from", "git+https://github.com/fivetran/fivetran-mcp", "fivetran-mcp"],
"env": {
"FIVETRAN_API_KEY": "your-api-key",
"FIVETRAN_API_SECRET": "your-api-secret",
"FIVETRAN_SCOPE": "read",
"DISALLOWED_ACTIONS": "system-keys:write,system-keys:delete"
}
}
}
}Usando un clon local (Opción B):
{
"mcpServers": {
"fivetran": {
"command": "python",
"args": ["/path/to/fivetran-mcp/server.py"],
"env": {
"FIVETRAN_API_KEY": "your-api-key",
"FIVETRAN_API_SECRET": "your-api-secret",
"FIVETRAN_SCOPE": "read",
"DISALLOWED_ACTIONS": "system-keys:write,system-keys:delete"
}
}
}
}Guarda el archivo y reinicia Claude Desktop
Busca el indicador del servidor MCP en la esquina inferior derecha de la entrada de chat
Claude Code (CLI)
Usa el comando claude mcp add para registrar el servidor.
Usando uvx (Opción A):
claude mcp add fivetran \
--env FIVETRAN_API_KEY=your-api-key \
--env FIVETRAN_API_SECRET=your-api-secret \
--env FIVETRAN_SCOPE=read \
--env DISALLOWED_ACTIONS=system-keys:write,system-keys:delete \
-- uvx --from git+https://github.com/fivetran/fivetran-mcp fivetran-mcpUsando un clon local (Opción B):
claude mcp add fivetran \
--env FIVETRAN_API_KEY=your-api-key \
--env FIVETRAN_API_SECRET=your-api-secret \
--env FIVETRAN_SCOPE=read \
--env DISALLOWED_ACTIONS=system-keys:write,system-keys:delete \
-- python /path/to/fivetran-mcp/server.pyO agrégalo directamente a tu configuración de ~/.claude.json:
{
"mcpServers": {
"fivetran": {
"command": "uvx",
"args": ["--from", "git+https://github.com/fivetran/fivetran-mcp", "fivetran-mcp"],
"env": {
"FIVETRAN_API_KEY": "your-api-key",
"FIVETRAN_API_SECRET": "your-api-secret",
"FIVETRAN_SCOPE": "read",
"DISALLOWED_ACTIONS": "system-keys:write,system-keys:delete"
}
}
}
}Verifica que el servidor esté configurado:
claude mcp listOpenAI Codex
Codex almacena la configuración de MCP en ~/.codex/config.toml. Puedes configurarlo mediante CLI o editando el archivo directamente.
Opción 1: CLI
Usando uvx (Opción A):
codex mcp add fivetran \
--env FIVETRAN_API_KEY=your-api-key \
--env FIVETRAN_API_SECRET=your-api-secret \
--env FIVETRAN_SCOPE=read \
--env DISALLOWED_ACTIONS=system-keys:write,system-keys:delete \
-- uvx --from git+https://github.com/fivetran/fivetran-mcp fivetran-mcpUsando un clon local (Opción B):
codex mcp add fivetran \
--env FIVETRAN_API_KEY=your-api-key \
--env FIVETRAN_API_SECRET=your-api-secret \
--env FIVETRAN_SCOPE=read \
--env DISALLOWED_ACTIONS=system-keys:write,system-keys:delete \
-- python /path/to/fivetran-mcp/server.pyOpción 2: Editar config.toml
Agrega lo siguiente a ~/.codex/config.toml. Usando uvx (Opción A):
[mcp_servers.fivetran]
command = "uvx"
args = ["--from", "git+https://github.com/fivetran/fivetran-mcp", "fivetran-mcp"]
[mcp_servers.fivetran.env]
FIVETRAN_API_KEY = "your-api-key"
FIVETRAN_API_SECRET = "your-api-secret"
FIVETRAN_SCOPE = "read"
DISALLOWED_ACTIONS = "system-keys:write,system-keys:delete"Usando un clon local (Opción B):
[mcp_servers.fivetran]
command = "python"
args = ["/path/to/fivetran-mcp/server.py"]
[mcp_servers.fivetran.env]
FIVETRAN_API_KEY = "your-api-key"
FIVETRAN_API_SECRET = "your-api-secret"
FIVETRAN_SCOPE = "read"
DISALLOWED_ACTIONS = "system-keys:write,system-keys:delete"Verifica la configuración:
codex mcp listCursor
Cursor admite configuraciones de MCP tanto globales como a nivel de proyecto.
Configuración global: ~/.cursor/mcp.json
Configuración de proyecto: .cursor/mcp.json (en la raíz de tu proyecto)
Agrega lo siguiente a tu archivo de configuración elegido.
Usando uvx (Opción A):
{
"mcpServers": {
"fivetran": {
"command": "uvx",
"args": ["--from", "git+https://github.com/fivetran/fivetran-mcp", "fivetran-mcp"],
"env": {
"FIVETRAN_API_KEY": "your-api-key",
"FIVETRAN_API_SECRET": "your-api-secret",
"FIVETRAN_SCOPE": "read",
"DISALLOWED_ACTIONS": "system-keys:write,system-keys:delete"
}
}
}
}Usando un clon local (Opción B):
{
"mcpServers": {
"fivetran": {
"command": "python",
"args": ["/path/to/fivetran-mcp/server.py"],
"env": {
"FIVETRAN_API_KEY": "your-api-key",
"FIVETRAN_API_SECRET": "your-api-secret",
"FIVETRAN_SCOPE": "read",
"DISALLOWED_ACTIONS": "system-keys:write,system-keys:delete"
}
}
}
}Alternativa: Usa la interfaz de Cursor
Abre Cursor y presiona
Cmd/Ctrl + Shift + PBusca "MCP" y selecciona Ver: Abrir configuración de MCP
Haz clic en Herramientas e integraciones → Herramientas MCP → Agregar MCP personalizado
Agrega la configuración anterior
Reinicia Cursor para cargar la nueva configuración del servidor MCP.
Preguntas de ejemplo
"¿Qué conexiones están fallando?"
"¿Cuándo se sincronizó por última vez la conexión de Salesforce?"
"Muéstrame todas las conexiones en el grupo Producción"
"¿Qué destinos tenemos configurados?"
Available Tools
22 toolsaccount_readARead-only
Read operations on Fivetran account (1 endpoints: get_account_info). Pass the endpoint name in name. Call list_endpoints(category='account') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so safety is covered. The description adds that only one endpoint exists, useful scoping context, but says nothing about auth, rate limits, or response shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, fully front-loaded: purpose first, discovery mechanism second. No filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-endpoint read tool with no output schema and annotations covering the safety profile, this is close to complete. The main missing piece is any hint of what get_account_info returns, though readOnlyHint lets the agent infer safe read semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description reinforces that `name` carries the endpoint identifier and points to list_endpoints as the source, but adds no syntax beyond what the schema already documents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Read operations on Fivetran account') and names the exact endpoint covered (get_account_info). Distinguishes itself from siblings like connections_read or users_read by scoping to the account group.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Tells the agent how to discover the full operation list via list_endpoints(category='account') and that the endpoint name goes in `name`. Doesn't explicitly state exclusions or when to prefer a different resource group, but the endpoint enumeration makes usage clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
connections_readARead-only
Read operations on Fivetran connections (12 endpoints: connection_column_config, connection_details, connection_moved_job_status, connection_schema_config, connection_state, connection_sync_history, connection_warnings, get_connection_certificate_details, + 4 more). Pass the endpoint name in name. Call list_endpoints(category='connections') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds the dispatcher structure (12 endpoints, required name) which is useful context, but nothing about return shape, pagination, or auth. With annotations carrying the behavioral load, a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences, front-loaded with the purpose and endpoint inventory before the mechanics. The list compresses well, though the truncated '+ 4 more' enumeration is slightly awkward for an agent trying to see full coverage.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a multi-endpoint dispatcher with no output schema, the description supplies the essential discovery workflow (list_endpoints) and how to invoke sub-endpoints. Return values are necessarily defined by each endpoint rather than this wrapper, so the omission is acceptable, leaving only minor gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents name, body, query, and path_params. The description's guidance to pass the endpoint name largely restates what the schema's `name` field already says ('from list_endpoints'), adding only marginal value. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (read operations) and resource (Fivetran connections) and enumerates the sub-endpoints covered, making the dispatcher nature unmistakable. An agent can immediately tell this group handles connections reads versus the other resource groups in the sibling list.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells the agent to pass the endpoint name in `name` and to call list_endpoints(category='connections') to discover the full set, which is a clear usage workflow. It lacks any when-not-to-use note (e.g., pointing to write endpoints), so it falls short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
connector_sdk_readARead-only
Read operations on Fivetran connector sdk (3 endpoints: download_connector_sdk_package, get_connector_sdk_package, list_connector_sdk_packages). Pass the endpoint name in name. Call list_endpoints(category='connector-sdk') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safe read profile (readOnlyHint=true, destructiveHint=false, openWorldHint=false), so the burden is lighter. The description adds real behavioral value by disclosing that this is a multi-endpoint dispatcher and naming the three operations, which tells the agent what capabilities actually live behind this single tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences with no filler; the scope and endpoint inventory come first, followed by the usage and discovery hints. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a dispatcher tool with no output schema, it covers endpoints, the required parameter source, and the discovery path. It does not describe what the calls return (e.g., whether download yields a package URL or file), a minor gap given the endpoint names are self-explanatory.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters are already documented, including the note that `name` comes from list_endpoints. The description reinforces the `name` semantics and adds the concrete discovery call, but this borders on usage guidance rather than adding new parameter meaning — baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (read operations on the Fivetran connector SDK) and enumerates the three endpoints it dispatches to, so the agent knows exactly what surface is covered. Combined with the resource-specific name, it is clearly distinguishable from the other '_read' siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explains the dispatch mechanism ('Pass the endpoint name in `name`') and routes the agent to the discovery alternative ('Call list_endpoints(category='connector-sdk') for the full list'). It lacks an explicit when-not-to-use statement, but the operational context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
destinations_readARead-only
Read operations on Fivetran destinations (6 endpoints: destination_details, get_destination_certificate_details, get_destination_certificates_list, get_destination_fingerprint_details, get_destination_fingerprints_list, list_destinations). Pass the endpoint name in name. Call list_endpoints(category='destinations') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds the useful dispatch mechanism (endpoint name multiplexing), but says nothing about auth requirements, rate limits, or pagination behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with zero waste. The purpose and endpoint list are front-loaded, followed by the required routing instruction.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a dispatcher tool with no output schema, the description adequately explains the name-multiplexing mechanism and how to discover valid values. It stops short of explaining how body/query/path_params vary per endpoint, though the schema documents those fields.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the `name` property description already explains it comes from list_endpoints, so the schema carries the load. The description restates rather than enriches the parameter meaning, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Read operations on Fivetran destinations') and enumerates all six concrete endpoints it dispatches to. The category scoping clearly distinguishes it from sibling *_read tools like connections_read or users_read.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit routing instructions: pass the endpoint name in `name` and call list_endpoints(category='destinations') to discover valid values. It does not state when NOT to use this tool versus a dedicated endpoint tool, but the category restriction is clear from context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
external_logging_readARead-only
Read operations on Fivetran external logging (3 endpoints: get_account_log_service_details, get_log_service_details, list_log_services). Pass the endpoint name in name. Call list_endpoints(category='external-logging') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds useful behavioral context: this is a dispatcher spanning exactly three named endpoints and requires discovery through list_endpoints. It does not cover auth or rate-limit behavior, but that is reasonable given the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the purpose and immediately followed by the key invocation instruction and discovery route. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only dispatcher, the description supplies the essential calling information: the covered endpoint names, where to find the full list, and how to pass the endpoint name. It does not describe return shape, but the tool is read-only and has no output schema, so this is a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the schema already documents `name` as coming from list_endpoints. The description repeats that guidance and provides the three endpoint names as examples, but adds no syntax or constraints for `body`, `query`, or `path_params`. Baseline 3 is appropriate when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: read operations on Fivetran external logging. It names the three covered endpoints and clearly scopes the tool to that resource group, making it distinguishable from sibling *_read tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It tells the agent to pass the endpoint name in `name` and to call list_endpoints(category='external-logging') for the full list. This gives clear usage context, though it does not explicitly state when not to use this tool versus other resource-read siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
external_secrets_managers_entities_readARead-only
Read operations on Fivetran external secrets managers entities (1 endpoints: list_esm_entities). Pass the endpoint name in name. Call list_endpoints(category='external-secrets-managers-entities') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds the dispatcher pattern (name drives which endpoint runs), which is useful, but says nothing about return shape, pagination, or error behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with no filler, and the core purpose is front-loaded before the calling convention. Sized well for a thin dispatcher-style tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a generic read dispatcher with full schema coverage and no output schema, the description supplies the essential calling convention. It is nearly complete, missing only any note on the return payload or how to interpret the single endpoint's output.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema documents all four parameters and establishes a baseline of 3. The description reinforces the role of `name` and its source (list_endpoints) but adds little beyond what the schema already states.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (read) and resource (Fivetran external secrets managers entities) and names the single underlying endpoint (list_esm_entities). It is distinguishable from the sibling external_secrets_managers_read by the 'entities' sub-resource, though the distinction is subtle and not called out explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives concrete operational guidance: pass the endpoint name in `name` and call list_endpoints with category='external-secrets-managers-entities' to discover valid values. However it never states when to prefer this tool over the base external_secrets_managers_read sibling, so the when-not condition is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
external_secrets_managers_readARead-only
Read operations on Fivetran external secrets managers (3 endpoints: get_esm_details, get_esm_entities, list_esms). Pass the endpoint name in name. Call list_endpoints(category='external-secrets-managers') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds that this is a multi-endpoint dispatcher, which is useful context, but says nothing about return format or per-endpoint behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences, front-loaded with the resource and endpoint list, followed by the mechanical guidance on how to populate `name`. No filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a generic dispatcher with no output schema and fully documented parameters, the description supplies exactly what an agent needs: the endpoint names, where to put them, and how to discover the full list. Minor gap in not distinguishing it from the entities_read sibling.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters are already documented in the schema. The description only reinforces how `name` selects the endpoint, adding no syntax or format detail beyond the schema. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (read) and resource (Fivetran external secrets managers) and enumerates the three concrete endpoints it dispatches to. It is distinguishable from most siblings, though get_esm_entities overlaps slightly with the external_secrets_managers_entities_read sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear operational guidance: pass the endpoint name in `name` and call list_endpoints(category='external-secrets-managers') to enumerate valid values. It does not state when-not to use it or how it differs from the entities_read sibling, so it falls short of a full 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_schemaARead-only
Return the full schema for a Fivetran endpoint — description, parameters, request body schema, response schema. Provide service (e.g. 'postgres') on create_connection / modify_connection / create_destination / modify_destination to splice in the per-service config shape.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Endpoint name (e.g. 'create_connection'). Discover via list_endpoints. | |
| service | No | Service identifier (e.g., 'postgres', 'salesforce'). Only meaningful for create/modify connection or destination endpoints. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, openWorldHint=false, so safety is covered. The description adds a non-obvious behavioral trait beyond that: the returned schema is dynamically reshaped by the `service` parameter for create/modify endpoints. It stops short of noting rate limits or caching, but the dynamic-output disclosure is genuine added value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose followed by the parameter nuance. The second sentence is dense (four endpoint names plus the splice concept) but every clause earns its place. No filler or restated title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description correctly enumerates the return shape (description, parameters, request body, response schema), and both inputs are fully covered by a 100%-coverage schema. For a simple read-only 2-param metadata tool this is essentially complete; only the sibling routing is arguably missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters are documented in-schema with examples. The description mostly restates the `service` semantics already present in the schema ('Only meaningful for create/modify connection or destination endpoints'), so it adds only marginal meaning beyond structured data — the baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear specific verb + resource: 'Return the full schema for a Fivetran endpoint,' and it enumerates exactly what is returned (description, parameters, request body schema, response schema). It does not, however, differentiate itself from siblings like list_endpoints or the various *_read tools within the description text itself — that routing hint lives only in the parameter schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit conditional guidance for one input: pass `service` on create_connection/modify_connection/create_destination/modify_destination to splice in per-service config. It gives no guidance on when to call get_schema versus list_endpoints or the *_read siblings, so tool-level usage is only implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
groups_readARead-only
Read operations on Fivetran groups (6 endpoints: group_details, group_service_account, group_ssh_public_key, list_all_connections_in_group, list_all_groups, list_all_users_in_group). Pass the endpoint name in name. Call list_endpoints(category='groups') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safe read-only profile (readOnlyHint=true, destructiveHint=false), so the bar is lower. The description adds genuinely useful behavior beyond that: this is a fan-out router with 6 discrete sub-endpoints, and the required `name` value comes from list_endpoints. It stops short of noting per-endpoint input differences (e.g., which need path_params or body).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tightly packed sentences with zero waste: purpose and endpoint list first, then the invocation contract, then the discovery pointer. Front-loaded and easy to scan.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a router-style tool with full schema coverage, annotations, and no output schema, the definition is largely sufficient: it names all endpoints and the discovery path. The only minor gap is not flagging that different sub-endpoints require different path_params or body payloads.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so body/query/path_params semantics are fully documented in the schema, establishing a baseline of 3. The description only reinforces that `name` is an endpoint identifier from an enumerated set and does not add format detail beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource (read operations on Fivetran groups) and enumerates the exact 6 endpoints it dispatches to, so the agent knows precisely what surface it covers. It is clearly distinguishable from sibling *_read tools covering other resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explains the invocation contract (pass the endpoint name in `name`) and routes the agent to list_endpoints(category='groups') for discovery. It gives clear context for using the tool but does not explicitly state when NOT to use it versus calling list_endpoints or a more specific sibling directly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
hybrid_deployment_agents_readARead-only
Read operations on Fivetran hybrid deployment agents (2 endpoints: get_hybrid_deployment_agent, get_hybrid_deployment_agent_list). Pass the endpoint name in name. Call list_endpoints(category='hybrid-deployment-agents') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds that this is a thin dispatcher over exactly two read endpoints, which is useful context, but it says nothing about response shape or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the resource and scope, then the calling convention, then the discovery step. Nothing is padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only dispatching wrapper with no output schema, the description covers what the tool is, how to select an endpoint, and where to enumerate options. It does not explain how body/query/path_params interact with the two read endpoints, which is a minor gap given they are largely irrelevant for GETs.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all four parameters; baseline is 3. The description adds that `name` must be one of the two named endpoints sourced from list_endpoints, which is a small increment over the schema text but not new detail on body/query/path_params.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (read) and resource (Fivetran hybrid deployment agents) and enumerates the exact two endpoints it dispatches to, so an agent knows what this wraps. It distinguishes itself from generic siblings by naming the resource, though it doesn't explicitly contrast with other *_read tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Tells the agent to pass the endpoint name in `name` and to call list_endpoints(category='hybrid-deployment-agents') to discover valid values. That is a clear, actionable usage path with no ambiguity, though there is no when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_endpointsARead-only
Discover Fivetran API endpoints. With no arguments, returns {categories: {category: count}, callable_counts: {category: n}, total: N}. Provide category (e.g. 'connections') for endpoints in that category, or search to substring-match across name, summary, and path. Each endpoint row carries callable: bool — false means the endpoint isn't reachable through this MCP; see server instructions. Deprecated endpoints are hidden by default; set include_deprecated=true to show them.
| Name | Required | Description | Default |
|---|---|---|---|
| search | No | Substring to match against endpoint name, summary, or path. | |
| category | No | Resource category (e.g., 'connections', 'destinations', 'groups'). Omit for counts. | |
| include_deprecated | No | Include deprecated endpoints. Default: false. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, non-destructive), and the description goes further by disclosing that deprecated endpoints are hidden unless include_deprecated=true and by explaining the `callable: bool` field — that false means the endpoint is not reachable through this MCP. That is real behavioral context an agent cannot get from the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Dense and front-loaded — purpose first, then the three argument modes, then the return-shape caveat, then deprecation behavior. Every sentence carries distinct information with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description describes the return shapes for the no-argument and filtered cases and explains the callable flag, so an agent knows what it will receive. Nothing needed to call this tool correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds value beyond it: it gives a concrete category example ('connections'), clarifies that omitting the category yields counts, and describes the return payload shape for each mode. It stops short of exhaustive syntax detail, which the schema already supplies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Discover Fivetran API endpoints') and unmistakably separates itself from every *_read sibling by being a meta-discovery tool rather than a data reader. The two operating modes are named immediately.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes the agent by argument: no arguments returns counts, `category` narrows to one resource family, `search` substring-matches across name/summary/path. Each mode's trigger condition is spelled out, leaving nothing to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
metadata_readARead-only
Read operations on Fivetran metadata (2 endpoints: metadata_connector_config, metadata_connectors). Pass the endpoint name in name. Call list_endpoints(category='metadata') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safe-read profile is covered. The description only adds that the tool is scoped to a curated two-endpoint set; it says nothing about pagination, response shape, or auth, so with annotations carrying the safety burden a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences, zero filler, with the core purpose and endpoint list front-loaded before the discovery hint. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only wrapper over two endpoints with full schema coverage and no output schema, the description supplies enough to invoke it correctly: valid endpoint names and how to discover more. It could note that `body` is only needed for write-style endpoints, but the schema already covers that.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value beyond the schema by enumerating the two concrete endpoint names accepted by `name` (the schema has no enum), and by pointing to list_endpoints as the source of valid values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Read) and resource (Fivetran metadata), and names the two endpoints it covers (metadata_connector_config, metadata_connectors). This lets an agent distinguish it immediately from siblings like connections_read or users_read, which target other resource groups.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Tells the caller to pass the endpoint name in `name` and to call list_endpoints(category='metadata') to discover the full set, which is clear procedural guidance. It stops short of explicit when-not-to-use or exclusion conditions, so it is not a full 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
private_links_readARead-only
Read operations on Fivetran private links (2 endpoints: get_private_link_details, get_private_links). Pass the endpoint name in name. Call list_endpoints(category='private-links') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is fully covered. The description adds only the endpoint count/names, which is scope information rather than new behavioral detail; nothing is said about pagination, error behavior on an unknown endpoint, or auth requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, no filler, and the resource scope is front-loaded before the dispatch instructions. The parenthetical endpoint list is compact, though the middle clause slightly interrupts the flow between purpose and guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a generic by-name dispatcher with no output schema, the description supplies what an agent actually needs: the resource scope, the dispatch mechanism, and the way to discover valid endpoint names. Only minor gaps remain, such as what happens when an invalid `name` is passed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters are already documented in the schema. "Pass the endpoint name in `name`" restates the schema and adds no format or constraint detail beyond what is there. Baseline 3 applies when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ("Read operations on Fivetran private links") and narrows the scope further by enumerating the exact two endpoints it wraps. This lets an agent distinguish it from the other *_read dispatchers (proxy_read, webhooks_read, etc.) without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives the concrete discovery path: "Call list_endpoints(category='private-links') for the full list." That tells the agent how to obtain valid `name` values. It does not state when-not to use this group versus a sibling read group, so it stops short of full when/when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
proxy_readARead-only
Read operations on Fivetran proxy (3 endpoints: get_proxy_agent, get_proxy_agent_connections, get_proxy_agent_details). Pass the endpoint name in name. Call list_endpoints(category='proxy') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false and a closed-world scope, so the safety profile is covered. The description adds the dispatch behavior (3 named endpoints, discovery via list_endpoints), but says nothing about response shape, pagination, or per-endpoint differences beyond the names.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero filler, and the scope plus the three valid endpoint names are front-loaded ahead of the discovery hint. Nothing could be cut without losing routing information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a generic dispatch tool whose annotations carry the safety profile and which has no output schema, the description supplies the essential pieces: what it covers, how `name` maps to endpoints, and where to get the authoritative list. Only per-endpoint distinctions or response notes are missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so body/query/path_params/name are all documented in the schema itself. The description only clarifies that `name` must be one of the three proxy endpoints from list_endpoints, which mildly reinforces but does not extend the schema. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (read), the resource (Fivetran proxy), and enumerates the three covered endpoints (get_proxy_agent, get_proxy_agent_connections, get_proxy_agent_details). This is enough for an agent to distinguish it from the many sibling *_read dispatchers, which are scoped to other categories.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells the agent to pass the endpoint name in `name` and to call list_endpoints(category='proxy') for the full list, which is the routing path for this dispatcher. It stops short of saying when NOT to use it (e.g., that other categories belong to sibling tools), leaving that to inference from the sibling names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
public_readARead-only
Read operations on Fivetran public (1 endpoints: metadata_public_connectors). Pass the endpoint name in name. Call list_endpoints(category='public') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is covered by structured data. The description usefully adds the dispatch-by-name pattern and the size of the endpoint group, but says nothing about pagination, auth requirements, or the shape of returned data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the verb/resource and scope, then the required parameter, then the discovery call. Every sentence carries actionable information with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterized dispatcher over a single endpoint, the description plus the 100%-covered schema give an agent enough to invoke it correctly; the discovery pointer closes the main gap. It is slightly thin on return shape, but no output schema exists and the description need not carry return semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters (name, body, query, path_params) are already documented in the schema, giving a baseline of 3. The description reinforces that `name` must come from list_endpoints, but adds no syntax, format, or constraint detail beyond that.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource (read operations on Fivetran public endpoints) and discloses the exact scope of the group (1 endpoint: metadata_public_connectors). It partially distinguishes itself from siblings by pointing at list_endpoints, though the generic 'public' group name is not self-explanatory.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explains the dispatch mechanism ('Pass the endpoint name in `name`') and routes the agent to list_endpoints(category='public') to discover valid values. That is clear usable context, but there is no guidance on when to prefer this tool over sibling *_read tools or when it would fail.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
roles_readARead-only
Read operations on Fivetran roles (1 endpoints: list_all_roles). Pass the endpoint name in name. Call list_endpoints(category='roles') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds the scope constraint that only one endpoint exists in this group, but says nothing about pagination, auth, or response shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the resource and endpoint count, then the invocation rule. Minimal waste, though the `name` instruction slightly restates the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only dispatcher with no output schema, the description supplies what an agent needs: the resource scope, the endpoint count, and the discovery mechanism. It could note that responses are read-only endpoint payloads, but nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters are already documented. The description reinforces that `name` carries the endpoint identifier and points to list_endpoints for valid values, but adds no format or constraint details beyond the schema. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource: read operations on Fivetran roles, and names the sole endpoint (list_all_roles). An agent can distinguish it from the other *_read dispatchers by the 'roles' resource, though it does not explicitly contrast itself with a sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clearly instructs how to select the endpoint ('Pass the endpoint name in `name`') and where to discover the valid values ('Call list_endpoints(category='roles')'). It gives forward routing rather than when-not-to-use exclusions, but the context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
system_keys_readARead-only
Read operations on Fivetran system keys (2 endpoints: get_system_key_details, get_system_keys). Pass the endpoint name in name. Call list_endpoints(category='system-keys') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds genuine value beyond that by disclosing this is a dispatcher with exactly two read endpoints and by pointing to the discovery flow (list_endpoints). It does not mention pagination or return shape, but with no output schema and a read-only profile that is a modest gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the scope and endpoint count, followed by the single required action and the discovery hint. No filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only dispatcher with no output schema, the description supplies the endpoint list, the `name` requirement, and the list_endpoints discovery path. The remaining gap is that it never explains how to supply identifying values (e.g., the path parameter for get_system_key_details), but the schema's path_params field partially covers that.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters are already documented in the schema. The description only restates the `name` semantics (endpoint name from list_endpoints) and says nothing about how body/query/path_params should be filled for these GET-style endpoints, so it adds little beyond the schema. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (read operations on Fivetran system keys) and even enumerates the two underlying endpoints (get_system_key_details, get_system_keys). An agent can distinguish this from sibling groups like users_read or webhooks_read purely from the name plus this enumeration, without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a concrete routing instruction: 'Pass the endpoint name in `name`' and 'Call list_endpoints(category='system-keys') for the full list.' That is clear usage context and names a discovery alternative, though it never states when NOT to use this tool (e.g., for write operations, which live elsewhere).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
teams_readARead-only
Read operations on Fivetran teams (8 endpoints: get_team_membership_in_connection, get_team_membership_in_group, get_team_memberships_in_connections, get_team_memberships_in_groups, get_user_in_team, list_all_teams, list_users_in_team, team_details). Pass the endpoint name in name. Call list_endpoints(category='teams') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds that this is a dispatcher requiring an endpoint name sourced from list_endpoints, but says nothing about auth requirements, pagination, or per-endpoint prerequisites (e.g. path_params for membership lookups).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the scope and endpoint inventory, followed by the two invocation facts an agent needs. Every sentence earns its place with no restatement of the name or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a multi-endpoint dispatcher with no output schema, the description supplies the endpoint inventory and the discovery path, which is the core of what an agent needs. It leaves per-endpoint parameter requirements and response shape unstated, which is a modest but real gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description goes beyond the generic schema text by enumerating the valid values for `name` and pointing at list_endpoints as the authority for that value set. It still does not explain which endpoints require path_params or query, leaving the nested-object parameters to the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (read operations) and resource (Fivetran teams), and enumerates the eight concrete endpoints reachable through the dispatcher, so the agent knows exactly what is behind the name. It distinguishes itself from siblings only implicitly by resource scope; there is no explicit contrast with users_read or groups_read, which would be needed for a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear operating instructions: pass the endpoint name in `name` and call list_endpoints(category='teams') for the full list. This is actionable context without exclusions, but it does not say when a caller should prefer a different *_read sibling over this one.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
transformation_projects_readARead-only
Read operations on Fivetran transformation projects (2 endpoints: list_all_transformation_projects, transformation_project_details). Pass the endpoint name in name. Call list_endpoints(category='transformation-projects') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is covered. The description adds a real behavioral trait beyond that: this is a dispatch/proxy tool that fans out to exactly 2 endpoints selected via `name`, plus the workflow needed to enumerate them. It stops short of describing return shape or pagination.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tightly packed sentences with no filler; the resource scope and the two endpoints are front-loaded before the dispatch instruction and the discovery hint.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a multiplexed read proxy with no output schema and 100% schema coverage, the description supplies the essential context: what the tool covers, the number and names of endpoints, and how to discover valid `name` values. It omits any per-endpoint description and any routing hint versus transformations_read, which are the remaining gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so every parameter is already documented, and the schema's own `name` description already points to list_endpoints. The description only restates that the endpoint name goes in `name`, adding marginal value over the structured fields, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Read operations on Fivetran transformation projects') and enumerates the two underlying endpoints (list_all_transformation_projects, transformation_project_details), so the agent knows the scope. It does not, however, differentiate itself from the close sibling transformations_read, which handles a different but similarly named resource.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a concrete discovery step: call list_endpoints(category='transformation-projects') to obtain valid `name` values, and states that the endpoint name must be passed in `name`. This is clear usage context, but there are no exclusions or guidance on when to prefer this over transformations_read or the other *_read siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
transformations_readARead-only
Read operations on Fivetran transformations (4 endpoints: transformation_details, transformation_package_metadata_details, transformation_package_metadata_list, transformations_list). Pass the endpoint name in name. Call list_endpoints(category='transformations') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds the useful fact that this is a 4-endpoint dispatcher and how to discover endpoints, but says nothing about pagination, auth, or error behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, no filler, with the core purpose front-loaded before the operational instructions. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a dispatcher tool with a fully documented schema and annotations covering safety, the description supplies the essential missing piece: which endpoint names exist and where to get the authoritative list. Pagination and per-endpoint argument requirements are left implicit, which is a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description goes further by defining the valid domain of `name` (the four listed endpoints) and pointing to list_endpoints for discovery. It still leaves body/query/path_params usage entirely to the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Read operations on Fivetran transformations') and enumerates the four endpoints it multiplexes, which lets an agent map an intended call to this tool without opening the schema. It does not explicitly contrast with adjacent siblings like transformation_projects_read, so it falls just short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives concrete operational routing: pass the endpoint name in `name`, and call list_endpoints(category='transformations') to enumerate valid endpoints. That is genuine when/how guidance, but it offers no exclusion criteria telling the agent when a sibling read tool is the better choice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
users_readARead-only
Read operations on Fivetran users (8 endpoints: get_user_api_key, get_user_membership_in_connections, get_user_membership_in_group, get_user_memberships_in_connections, get_user_memberships_in_groups, list_all_users, list_api_keys, user_details). Pass the endpoint name in name. Call list_endpoints(category='users') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds valuable dispatch behavior: it reveals the tool multiplexes 8 named endpoints and that the caller must pass the endpoint name in `name`, which is operational context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One compact paragraph, front-loaded with purpose, then the endpoint list, then call instructions. No filler; the endpoint list is dense but necessary for dispatch.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and full parameter schema coverage, the description supplies the essential dispatch mechanics and points to list_endpoints for full details. It does not explain per-endpoint body/query/path requirements, but the schema covers those fields adequately.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds meaning for the `name` parameter by listing the exact 8 endpoint names, supplementing the schema's generic 'from list_endpoints' text. Other parameters are left to their schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States 'Read operations on Fivetran users' and enumerates the 8 endpoints, so the verb, resource, and scope are clear. It does not explicitly contrast with sibling resource-read tools, but the tool name and endpoint list make its domain unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides a discovery hint (call list_endpoints(category='users') for the full list) but does not state when to choose users_read over sibling *_read tools or when not to use it. Usage is implied by the users domain but not explicitly guided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
webhooks_readARead-only
Read operations on Fivetran webhooks (2 endpoints: list_all_webhooks, webhook_details). Pass the endpoint name in name. Call list_endpoints(category='webhooks') for the full list.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Request body — dict or JSON string. Required for POST/PATCH endpoints. | |
| name | Yes | Endpoint name within this resource:action group (from list_endpoints). | |
| query | No | Query-string parameters. | |
| path_params | No | Values for path placeholders like {connectionId}, {groupId}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is fully covered. The description adds the dispatch mechanism (endpoint name passed via `name`) but says nothing about return shape, pagination, or per-endpoint caveats, so it clears the lowered bar without excelling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the resource and endpoint count front-loaded, followed immediately by the usage rule and discovery pointer. No filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a dispatcher with full schema coverage and safety annotations, plus a pointer to list_endpoints for discovery, the description is nearly sufficient. The absence of any per-endpoint behavior note (e.g., path placeholder needs for webhook_details) is a minor gap given no output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so `body`, `name`, `query`, and `path_params` are already documented in the schema. The description clarifies how `name` is populated (endpoint names from this group) but adds no syntax or format detail beyond that, matching the baseline 3 for schema-driven params.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('Read operations on Fivetran webhooks') and enumerates the two concrete endpoints it fronts (list_all_webhooks, webhook_details). An agent can immediately distinguish it from siblings like users_read, groups_read, or metadata_read.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It tells the agent the calling protocol ('Pass the endpoint name in `name`') and routes to a concrete alternative for discovery ('Call list_endpoints(category=\'webhooks\') for the full list'). It gives clear context for use but does not state any when-not conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
99 tool updates
v0.3.0- Added
account_read - Removed
add_log_service - Removed
add_user_to_group - Removed
cancel_transformation - Removed
connect_card - Removed
connection_column_config - Removed
connection_details - Removed
connection_schema_config - Removed
connection_state - Added
connections_read - Added
connector_sdk_read - Removed
create_account_webhook - Removed
create_connection - Removed
create_destination - Removed
create_group - Removed
create_group_webhook - Removed
create_hybrid_deployment_agent - Removed
create_transformation - Removed
create_transformation_project - Removed
delete_column_connection_config - Removed
delete_connection - Removed
delete_destination - Removed
delete_group - Removed
delete_hybrid_deployment_agent - Removed
delete_log_service - Removed
delete_multiple_columns_connection_config - Removed
delete_transformation - Removed
delete_transformation_project - Removed
delete_user_from_group - Removed
delete_webhook - Removed
destination_details - Added
destinations_read - Added
external_logging_read - Added
external_secrets_managers_entities_read - Added
external_secrets_managers_read - Removed
get_account_info - Removed
get_hybrid_deployment_agent - Removed
get_hybrid_deployment_agent_list - Removed
get_log_service_details - Added
get_schema - Removed
group_details - Removed
group_service_account - Removed
group_ssh_public_key - Added
groups_read - Added
hybrid_deployment_agents_read - Removed
list_all_connections_in_group - Removed
list_all_groups - Removed
list_all_transformation_projects - Removed
list_all_users_in_group - Removed
list_all_webhooks - Removed
list_connections - Removed
list_destinations - Added
list_endpoints - Removed
list_log_services - Removed
metadata_connector_config - Removed
metadata_connectors - Removed
metadata_public_connectors - Added
metadata_read - Removed
modify_connection - Removed
modify_connection_column_config - Removed
modify_connection_database_schema_config - Removed
modify_connection_schema_config - Removed
modify_connection_state - Removed
modify_connection_table_config - Removed
modify_destination - Removed
modify_group - Removed
modify_transformation_project - Removed
modify_webhook - Added
private_links_read - Added
proxy_read - Added
public_read - Removed
re_auth_hybrid_deployment_agent - Removed
reload_connection_schema_config - Removed
reset_hybrid_deployment_agent_credentials - Removed
resync_connection - Removed
resync_tables - Added
roles_read - Removed
run_destination_setup_tests - Removed
run_setup_tests - Removed
run_setup_tests_log_service - Removed
run_transformation - Removed
sync_connection - Added
system_keys_read - Added
teams_read - Removed
test_transformation_project - Removed
test_webhook - Removed
transformation_details - Removed
transformation_package_metadata_details - Removed
transformation_package_metadata_list - Removed
transformation_project_details - Added
transformation_projects_read - Removed
transformations_list - Added
transformations_read - Removed
update_log_service - Removed
update_transformation - Removed
upgrade_transformation_package - Added
users_read - Removed
webhook_details - Added
webhooks_read
77 tool updates
v0.1.1- First observed
add_log_service - First observed
add_user_to_group - First observed
cancel_transformation - First observed
connect_card - First observed
connection_column_config - First observed
connection_details - First observed
connection_schema_config - First observed
connection_state - First observed
create_account_webhook - First observed
create_connection - First observed
create_destination - First observed
create_group - First observed
create_group_webhook - First observed
create_hybrid_deployment_agent - First observed
create_transformation - First observed
create_transformation_project - First observed
delete_column_connection_config - First observed
delete_connection - First observed
delete_destination - First observed
delete_group - First observed
delete_hybrid_deployment_agent - First observed
delete_log_service - First observed
delete_multiple_columns_connection_config - First observed
delete_transformation - First observed
delete_transformation_project - First observed
delete_user_from_group - First observed
delete_webhook - First observed
destination_details - First observed
get_account_info - First observed
get_hybrid_deployment_agent - First observed
get_hybrid_deployment_agent_list - First observed
get_log_service_details - First observed
group_details - First observed
group_service_account - First observed
group_ssh_public_key - First observed
list_all_connections_in_group - First observed
list_all_groups - First observed
list_all_transformation_projects - First observed
list_all_users_in_group - First observed
list_all_webhooks - First observed
list_connections - First observed
list_destinations - First observed
list_log_services - First observed
metadata_connector_config - First observed
metadata_connectors - First observed
metadata_public_connectors - First observed
modify_connection - First observed
modify_connection_column_config - First observed
modify_connection_database_schema_config - First observed
modify_connection_schema_config - First observed
modify_connection_state - First observed
modify_connection_table_config - First observed
modify_destination - First observed
modify_group - First observed
modify_transformation_project - First observed
modify_webhook - First observed
re_auth_hybrid_deployment_agent - First observed
reload_connection_schema_config - First observed
reset_hybrid_deployment_agent_credentials - First observed
resync_connection - First observed
resync_tables - First observed
run_destination_setup_tests - First observed
run_setup_tests - First observed
run_setup_tests_log_service - First observed
run_transformation - First observed
sync_connection - First observed
test_transformation_project - First observed
test_webhook - First observed
transformation_details - First observed
transformation_package_metadata_details - First observed
transformation_package_metadata_list - First observed
transformation_project_details - First observed
transformations_list - First observed
update_log_service - First observed
update_transformation - First observed
upgrade_transformation_package - First observed
webhook_details
TDQS
Scored across 22 tools
Tools are mostly distinct by Fivetran resource category (account, connections, destinations, users, etc.), and meta-tools like list_endpoints and get_schema serve unique discovery/schema roles. Minor overlap exists between metadata_read and public_read, and all category tools share a near-identical 'pass endpoint name' template, but boundaries remain clear.
All names use snake_case; category tools consistently follow [resource]_read, and meta-tools use list_endpoints/get_schema. A fully uniform verb_noun pattern is not achieved because read tools are noun_read, but the convention is predictable and readable.
22 tools is above the typical 3-15 range and feels heavy, with many single-endpoint category wrappers (e.g., roles_read, public_read, account_read) that could have been consolidated. Each tool still maps to a meaningful API category, so it is borderline rather than excessive.
The surface is entirely read-only, with no create/update/delete/merge operations for any Fivetran resource, so common lifecycle tasks (creating a connector, updating a destination, deleting a user) are impossible. Read coverage is broad across categories, but the absence of write operations is a significant gap for a Fivetran management server.
Maintenance
Related MCP Connectors
Ask your Quickbase apps in plain language. Read-only by default; writes need human approval.
Query your org's data in natural language — read-only MCP access to SQL, NoSQL, files & warehouses.
Ask your organization's connected business data in plain language, with each person's permissions.
Ask about your Kodem Security data and act on findings in plain language, with your permissions.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to query and manage Datadog observability data including metrics, logs, traces, and monitors through natural language. Supports read-only operations by default for security.MIT
- FlicenseNot gradedqualityDmaintenanceEnables AI assistants to manage Fivetran users and connections, including inviting users, listing connections, and triggering syncs.-
- AlicenseAqualityCmaintenanceEnables interaction with an Airbyte instance through natural language, supporting workspaces, sources, destinations, connections, jobs, logs, tags, streams, and connector definitions.3641 PyPI5Apache 2.0
- AlicenseAqualityDmaintenanceEnables natural language interactions with Salesforce data, metadata, and reports, including report creation, discovery, and schema inspection.219 npm1MIT