CDP MCP Server

288 tools. 145 can modify or destroy data without limits.

38 destructive tools with no built-in limits. Policy required.

Last updated:

145 can modify or destroy data
143 read-only
288 tools total

Community server · catalogue entry checked 03/07/2026

How to control CDP MCP Server ↓

What CDP MCP Server exposes to your agents

Read (143) Write / Execute (107) Destructive / Financial (38)
Critical Risk

The most dangerous CDP MCP Server tools

145 of CDP MCP Server's 288 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control CDP MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and CDP MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "cdp_cache_delete_by_group": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "cdp_cache_put_by_group": {
    "limits": [
      {
        "counter": "cdp_cache_put_by_group_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "cdp_cache_get_by_group": {
    "limits": [
      {
        "counter": "cdp_cache_get_by_group_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register CDP MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON CDP →

Instant setup, no code required.

All 288 CDP MCP Server tools

DESTRUCTIVE 38 tools
Destructive cdp_cache_delete_by_group Delete a cache entry by group and ID. Returns 204 on success. Destructive cdp_cache_delete_by_id Delete a cache entry by ID. Returns 204 on success. Destructive cdp_cache_delete_by_key Delete a cache entry by explicit key. Returns 204 on success. Destructive cdp_deactivate_provision_instance Deactivate a provisioned instance (DELETE /provisions/instances/{id}). Destructive cdp_delete_a360_rule Delete an A360 rule Destructive cdp_delete_alert Delete/dismiss a triggered alert Destructive cdp_delete_alert_def Delete an alert definition Destructive cdp_delete_audience_def Delete an audience definition Destructive cdp_delete_campaign Delete a campaign definition by ID Destructive cdp_delete_client Delete an OAuth client by numeric ID Destructive cdp_delete_column_validator Delete a column validator Destructive cdp_delete_connector Delete a connector Destructive cdp_delete_connector_template Delete a connector definition Destructive cdp_delete_cubic_set_def Delete a CubicSetDef by ID Destructive cdp_delete_dashboard Delete a dashboard by ID Destructive cdp_delete_data_erasure_request Cancel/delete a pending data erasure request Destructive cdp_delete_data_export Delete a data export definition by ID. Destructive cdp_delete_dispatch Delete a dispatch definition Destructive cdp_delete_emailable_page cdp_delete_emailable_page Destructive cdp_delete_execution_bucket Delete an execution bucket Destructive cdp_delete_execution_summary_group Delete an execution summary group Destructive cdp_delete_mapping_template Delete a mapping template Destructive cdp_delete_message_def Delete a message definition by ID Destructive cdp_delete_output_connector Delete an output connector Destructive cdp_delete_output_connector_def Delete an output connector definition Destructive cdp_delete_prediction Delete a prediction definition (DELETE /v2/{tenantId}/campaign/predictionDefs/{id}). Destructive cdp_delete_report_def Delete a report definition by ID Destructive cdp_delete_role Delete a role by ID Destructive cdp_delete_schedule cdp_delete_schedule Destructive cdp_delete_selfservice_user Delete a self-service user by ID Destructive cdp_delete_squery_def Delete a SQueryDef by ID. Destructive cdp_delete_user Delete a CDP user by ID Destructive cdp_delete_widget Delete a widget by ID Destructive cdp_deprovision_instance cdp_deprovision_instance Destructive cdp_purge_data Purge customer data from the data warehouse. Destructive cdp_request_data_erasure cdp_request_data_erasure Destructive cdp_revoke_token cdp_revoke_token Destructive cdp_update_data_erasure_request cdp_update_data_erasure_request
EXECUTE 27 tools
Execute cdp_activate_schedule Activate a schedule via the workflow action handler. Execute cdp_calculate_audience Start an asynchronous audience count calculation. Execute cdp_deploy_workflow Deploy a workflow (make it active) Execute cdp_dw_execute_report Execute a report in real-time via the DW API path. Execute cdp_execute_audience_def Execute an audience definition to calculate the audience. Execute cdp_generate_query Generate a SQL query from a dataset definition. Execute cdp_generate_squery_def Generate arguments from a SQueryDef expression. Execute cdp_invoke_workflow_action cdp_invoke_workflow_action Execute cdp_login POST /authentication?action=login Execute cdp_logout POST /authentication?action=logout Execute cdp_post_tracking_event cdp_post_tracking_event Execute cdp_process_mailer_batch cdp_process_mailer_batch Execute cdp_provision_instance_action cdp_provision_instance_action Execute cdp_publish_web_campaign cdp_publish_web_campaign Execute cdp_query_sql cdp_query_sql Execute cdp_query_sql_post Execute a read-only SQL query via POST. Execute cdp_refresh_rtmeta Refresh the real-time metadata switch values. Execute cdp_rerun_job Re-run a completed or failed workflow job Execute cdp_resume_job Resume a suspended workflow job Execute cdp_retry_provision_instance cdp_retry_provision_instance Execute cdp_run_data_export cdp_run_data_export Execute cdp_run_workflow Trigger a workflow execution. Execute cdp_send_email Send an email of a specific type. Execute cdp_start_campaign cdp_start_campaign Execute cdp_stop_campaign Stop/kill a running campaign by ID. Sends a workflow kill signal. Execute cdp_suspend_job Suspend a running workflow job Execute cdp_validate_password_reset POST /authentication/reset?action=validate
WRITE 80 tools
Write cdp_cache_put_by_group Set or update a cache entry by group and ID. Write cdp_cache_put_by_id Set or update a cache entry by ID. The cache key is auto-generated. Write cdp_cache_put_by_key Set or update a cache entry by explicit key. Write cdp_clone_campaign Clone/copy a campaign definition by ID. Creates a duplicate. Write cdp_clone_prediction cdp_clone_prediction Write cdp_clone_resource cdp_clone_resource Write cdp_copy_cubic_set_def Copy a CubicSetDef by ID. Creates a duplicate of the OLAP query definition. Write cdp_copy_dashboard Copy a dashboard by ID. Creates a duplicate of the dashboard. Write cdp_copy_data_export Copy/duplicate a data export definition by ID. Write cdp_copy_datasetdef cdp_copy_datasetdef Write cdp_copy_report_def Copy a report definition by ID. Creates a duplicate of the report. Write cdp_copy_squery_def Copy a SQueryDef by ID. Creates a duplicate of the query definition. Write cdp_copy_widget Copy a widget by ID. Creates a duplicate of the widget. Write cdp_create_a360_rule Create a new A360 identity resolution rule. Pass rule as a JSON string. Write cdp_create_alert_def Create a new alert definition. Write cdp_create_audience_def Create a new audience definition. Write cdp_create_campaign cdp_create_campaign Write cdp_create_campaign_template Create/update a campaign template cross-reference. Write cdp_create_client Create a new OAuth client. Requires client_id_str, client_secret, grants, and token_validity. Write cdp_create_column_validator Create a new column validator. Pass validator as a JSON string. Write cdp_create_compaction_request Create a new compaction request. Pass request details as a JSON string. Write cdp_create_connector Create a new connector. Write cdp_create_connector_template Create a new connector definition. Pass definition as a JSON string. Write cdp_create_cubic_set_def Create a new CubicSetDef. API expects an array — wraps single object. Write cdp_create_dashboard Create a new dashboard. API expects an array — wraps single object. Write cdp_create_data_export cdp_create_data_export Write cdp_create_dispatch Create a dispatch definition for a campaign. Pass dispatch definition as a JSON string. Write cdp_create_emailable_page cdp_create_emailable_page Write cdp_create_entity Create a new entity in a DW resource. Pass entity data as a JSON string. Write cdp_create_execution_bucket Create a new execution bucket. Pass configuration as a JSON string. Write cdp_create_execution_summary_group Create a new execution summary group. Pass configuration as a JSON string. Write cdp_create_mapping_template Create a new mapping template. Pass template as a JSON string. Write cdp_create_message_def Create message definitions. Write cdp_create_output_connector Create a new output connector. Pass configuration as a JSON string. Write cdp_create_output_connector_def Create a new output connector definition. Pass definition as a JSON string. Write cdp_create_prediction cdp_create_prediction Write cdp_create_provision_instance cdp_create_provision_instance Write cdp_create_report_def cdp_create_report_def Write cdp_create_role Create a new role with whitelist/blacklist permissions. Pass whitelist/blacklist as JSON arrays of Permission Write cdp_create_schedule cdp_create_schedule Write cdp_create_selfservice_user Create a new self-service user. Pass user details as a JSON string. Write cdp_create_squery_def cdp_create_squery_def Write cdp_create_token POST /token?action=create&scheme={scheme} Write cdp_create_user Create a new CDP user. Requires userName and password. Write cdp_create_widget Create a new widget. API expects an array — wraps single object. Write cdp_deactivate_schedule Deactivate a schedule via the workflow action handler. Write cdp_export_report_excel Export a report as an Excel pivot file. Write cdp_generate_password_reset cdp_generate_password_reset Write cdp_restore_emailable_page cdp_restore_emailable_page Write cdp_set_current_version Roll back any CDP resource to a specific version. Write cdp_update_a360_rule Update an existing A360 rule. Pass updated fields as a JSON string. Write cdp_update_audience_def Update an existing audience definition. Pass updated fields as a JSON string. Write cdp_update_campaign cdp_update_campaign Write cdp_update_client Update an existing OAuth client Write cdp_update_column_validator Update a column validator. Pass updated fields as a JSON string. Write cdp_update_connector Update an existing connector. Pass updated fields as a JSON string. Write cdp_update_cubic_set_def Update an existing CubicSetDef by ID. Pass updated fields as a JSON string. Write cdp_update_customer_profile cdp_update_customer_profile Write cdp_update_dashboard Update an existing dashboard by ID. Pass updated fields as a JSON string. Write cdp_update_data_export cdp_update_data_export Write cdp_update_dispatch Update a dispatch definition. Pass updated fields as a JSON string. Write cdp_update_emailable_page cdp_update_emailable_page Write cdp_update_entity Update an existing entity in a DW resource. Pass updated fields as a JSON string. Write cdp_update_execution_bucket Update an execution bucket. Pass updated fields as a JSON string. Write cdp_update_execution_summary_group Update an execution summary group. Pass updated fields as a JSON string. Write cdp_update_mapping_template Update an existing mapping template. Pass updated fields as a JSON string. Write cdp_update_message_def Update a message definition by ID. Pass updated fields as a JSON string. Write cdp_update_output_connector Update an existing output connector. Pass updated fields as a JSON string. Write cdp_update_output_connector_def Update an output connector definition. Pass updated fields as a JSON string. Write cdp_update_password POST /authentication/reset?action=update Write cdp_update_prediction cdp_update_prediction Write cdp_update_provision_instance cdp_update_provision_instance Write cdp_update_report_def Update an existing report definition by ID. Pass updated fields as a JSON string. Write cdp_update_role Update an existing role. Pass whitelist/blacklist/included as JSON strings. Write cdp_update_schedule cdp_update_schedule Write cdp_update_selfservice_user Update a self-service user. Pass updated fields as a JSON string. Write cdp_update_selfservice_user_status cdp_update_selfservice_user_status Write cdp_update_squery_def Update an existing SQueryDef by ID. Pass updated fields as a JSON string. Write cdp_update_user Update an existing CDP user Write cdp_update_widget Update an existing widget by ID. Pass updated fields as a JSON string.
READ 143 tools
Read cdp_cache_get_by_group Get a cached value by group and ID. Read cdp_cache_get_by_id Get a cached value by ID. Read cdp_cache_get_by_key Get a cached value by explicit cache key. Read cdp_check_sso_state GET /sso/state?user={username}&tenant={tenant} Read cdp_data_erasure_status_override cdp_data_erasure_status_override Read cdp_describe_entity Get the schema/attribute definitions for a DW entity resource Read cdp_describe_resource cdp_describe_resource Read cdp_describe_resources List all available DW resources (tables/entities) for a tenant Read cdp_dw_fetch_report Fetch cached report results via the DW API path Read cdp_extend_token POST /token?action=extend&scheme={scheme} Read cdp_get_a360_rule Get a specific A360 rule by ID Read cdp_get_alert Get a specific triggered alert by ID Read cdp_get_alert_def Get a specific alert definition by ID Read cdp_get_audience_count cdp_get_audience_count Read cdp_get_audience_def Get a specific audience definition by ID Read cdp_get_calculated_count cdp_get_calculated_count Read cdp_get_campaign Get a specific campaign definition by ID Read cdp_get_campaign_output_attributes Get the output attribute columns for a campaign definition. Read cdp_get_campaign_run Get details of a specific campaign execution (dataset description) by ID Read cdp_get_client Get a specific OAuth client by numeric ID Read cdp_get_column_validator Get a specific column validator by ID Read cdp_get_connector Get a specific connector by ID Read cdp_get_connector_template Get a specific connector definition by ID Read cdp_get_connector_versions Get connector history / past batch runs for a connector Read cdp_get_cube_status GET /v2/{tenantId}/report/cubeStatus Read cdp_get_cube_status_by_names GET /v2/{tenantId}/report/cubeStatus?cubes={cubeNames} Read cdp_get_cubic_set_def Get a CubicSetDef by ID. Returns the full definition including the model (Saiku query JSON). Read cdp_get_customer_360 cdp_get_customer_360 Read cdp_get_customer_360_detail Get detailed Customer 360 profile for a specific customer Read cdp_get_customer_360_realtime Get real-time Customer 360 data (includes latest streaming events) Read cdp_get_customer_identities Get all identities associated with given customer IDs. Read cdp_get_dashboard Get a dashboard by ID. Returns full definition including widgets and layout structure. Read cdp_get_data_erasure_status List all data erasure request statuses for a tenant Read cdp_get_data_erasure_status_by_id Get the status of a specific data erasure request by resource ID Read cdp_get_data_export Get a specific data export definition by ID. Read cdp_get_dataset_def Get a specific datasetDef by ID. Read cdp_get_dimension_values Get values for a specific dimension level within an OLAP cube hierarchy. Read cdp_get_dispatch Get a specific dispatch definition by ID Read cdp_get_dqe1_rule Get a specific DQE Phase 1 rule by ID Read cdp_get_dqe2_rule Get a specific DQE Phase 2 rule by ID Read cdp_get_emailable_page Get an emailable page by id (GET /v2/{tenantId}/emailablepages/{id}). Read cdp_get_entity Get a single entity by its resource name and ID Read cdp_get_execution_summary_group Get a specific execution summary group by ID Read cdp_get_mailer_identifier_by_campaign_dispatch cdp_get_mailer_identifier_by_campaign_dispatch Read cdp_get_mapped_provision_instance cdp_get_mapped_provision_instance Read cdp_get_mapping_template Get a specific mapping template by ID Read cdp_get_message_def Get a specific message definition by ID Read cdp_get_offers Retrieve available offers for a customer or segment. Read cdp_get_orchestration_status cdp_get_orchestration_status Read cdp_get_orchestration_status_for_connector cdp_get_orchestration_status_for_connector Read cdp_get_orchestration_status_log cdp_get_orchestration_status_log Read cdp_get_output_connector Get a specific output connector by ID Read cdp_get_output_connector_def Get a specific output connector definition by ID Read cdp_get_prediction Get a specific prediction definition by ID (GET /v2/{tenantId}/campaign/predictionDefs/{id}). Read cdp_get_prediction_container cdp_get_prediction_container Read cdp_get_provision_instance Get a specific provisioned instance by ID. Read cdp_get_provision_limit cdp_get_provision_limit Read cdp_get_provision_service cdp_get_provision_service Read cdp_get_purge_status cdp_get_purge_status Read cdp_get_report_def Get a report definition by ID. Read cdp_get_role Get a specific role by ID Read cdp_get_run_dispatches Get latest execution status for a campaign definition. Read cdp_get_schedule Get a specific schedule by ID Read cdp_get_schema_checkpoints Get schema checkpoints for a tenant Read cdp_get_selfservice_user Get a specific self-service user by ID Read cdp_get_session_info POST /authentication/session Read cdp_get_squery_def Get a SQueryDef by ID. Returns the full definition including expression and arguments. Read cdp_get_status_message cdp_get_status_message Read cdp_get_summary_customization Get a specific summary customization by ID Read cdp_get_tenant Get details of a specific tenant by ID. Read cdp_get_token cdp_get_token Read cdp_get_udmp_table Get a specific UDMP table by ID Read cdp_get_user Get a specific CDP user by ID Read cdp_get_user_lite Get a specific user in lightweight format by ID Read cdp_get_web_templates Get web personalization templates for a tenant Read cdp_get_widget Get a widget by ID. Returns full definition including reportDef and visualization settings. Read cdp_get_workflow Get a specific workflow by ID. Optionally specify a version. Read cdp_get_workflow_job Get details of a specific workflow job execution. Read cdp_get_workflow_step Get a specific step in a workflow Read cdp_kill_job Kill a running workflow job Read cdp_list_a360_rules List A360 identity resolution rules Read cdp_list_alert_defs List alert definitions for a tenant Read cdp_list_alerts List triggered alerts (alert instances that have fired) Read cdp_list_audience_defs List audience definitions for a tenant. Returns paged results. Read cdp_list_campaign_runs cdp_list_campaign_runs Read cdp_list_campaign_templates cdp_list_campaign_templates Read cdp_list_campaigns List all campaign definitions for a tenant. Returns paged results. Read cdp_list_clients List all OAuth clients for a tenant Read cdp_list_clusters List available compute clusters Read cdp_list_column_validators List column validators for a tenant Read cdp_list_compaction_requests List compaction requests for a tenant Read cdp_list_connector_links Fetch all connector links (GET /provisions/links). Read cdp_list_connector_links_by_class cdp_list_connector_links_by_class Read cdp_list_connector_templates List available connector definitions (templates) Read cdp_list_connectors List all configured connectors for a tenant Read cdp_list_cube_metadata List all available OLAP cubes for a tenant. Returns cube unique names and captions. Read cdp_list_cubic_set_defs cdp_list_cubic_set_defs Read cdp_list_dashboards List all accessible dashboards for a tenant Read cdp_list_data_exports List all data export definitions for a tenant. Read cdp_list_dataset_defs cdp_list_dataset_defs Read cdp_list_dispatches List dispatch definitions for a campaign Read cdp_list_dqe1_rules List DQE Phase 1 data quality rules Read cdp_list_dqe2_rules List DQE Phase 2 data quality rules Read cdp_list_emailable_pages List emailable pages (GET /v2/{tenantId}/emailablepages). Read cdp_list_entities cdp_list_entities Read cdp_list_execution_buckets List execution buckets for a tenant Read cdp_list_execution_summary_groups List execution summary groups for a tenant Read cdp_list_mapping_templates List mapping templates for a tenant Read cdp_list_message_defs List message definitions for a tenant. Returns paged results. Read cdp_list_orchestration_status cdp_list_orchestration_status Read cdp_list_output_connector_defs List available output connector definitions Read cdp_list_output_connectors List all configured output connectors for a tenant Read cdp_list_predictions cdp_list_predictions Read cdp_list_provision_instances cdp_list_provision_instances Read cdp_list_provision_limits Fetch provisioning limits for all services of a tenant. Read cdp_list_provision_services List available provision services for a tenant (paged). Read cdp_list_provisioning_packages List available provisioning packages for a tenant Read cdp_list_report_defs List all report definitions for a tenant Read cdp_list_role_actions List all available permission actions that can be assigned to roles Read cdp_list_roles cdp_list_roles Read cdp_list_schedules cdp_list_schedules Read cdp_list_selfservice_roles List available self-service roles for a tenant Read cdp_list_selfservice_users List all self-service users for a tenant Read cdp_list_squery_defs List all SQueryDefs (SQL query definitions) for a tenant. Read cdp_list_summary_customizations List summary customizations for a tenant Read cdp_list_tenant_clusters List clusters assigned to the current tenant Read cdp_list_tenants List all tenants accessible to the current user Read cdp_list_udmp_resources List UDMP resources (available data resources in the platform) Read cdp_list_udmp_tables List UDMP (Unified Data Model Platform) tables Read cdp_list_unlinked_provision_instances cdp_list_unlinked_provision_instances Read cdp_list_users List all CDP users for a tenant with pagination; optional search filter Read cdp_list_users_lite List all users in lightweight format (fewer fields, faster response) Read cdp_list_widgets List all accessible widgets for a tenant. Read cdp_list_workflow_edges List all edges (connections) in a workflow DAG Read cdp_list_workflow_step_types List available workflow step types (node types for workflow DAGs) Read cdp_list_workflow_steps List all steps (nodes) in a workflow DAG Read cdp_list_workflows List workflows for a tenant Read cdp_lookup_audience_defs Lookup audiences by name. Read cdp_lookup_values Lookup distinct values for a field in a DW entity resource. Read cdp_reactivate_provision_instance cdp_reactivate_provision_instance Read cdp_score_spam cdp_score_spam Read cdp_unschedule_compaction_request Unschedule a compaction request by ID Read cdp_validate_squery_def Validate a SQueryDef expression.

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about CDP MCP Server

Can an AI agent delete data through the CDP MCP Server MCP server? +

Yes. The CDP MCP Server server exposes 38 destructive tools including cdp_cache_delete_by_group, cdp_cache_delete_by_id, cdp_cache_delete_by_key. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through CDP MCP Server? +

The CDP MCP Server server has 80 write tools including cdp_cache_put_by_group, cdp_cache_put_by_id, cdp_cache_put_by_key. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach CDP MCP Server.

How many tools does the CDP MCP Server MCP server expose? +

288 tools across 4 categories: Destructive, Execute, Read, Write. 143 are read-only. 145 can modify, create, or delete data.

How do I enforce a policy on CDP MCP Server? +

Register the CDP MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every CDP MCP Server tool call.

Deterministic rules across all 288 CDP MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

288 CDP MCP Server tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from CDP MCP Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.