// SCAN REPORT

Fabric Dw Mcp Cli

57 tools. 9 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 29 Jun 2026

9 can modify or destroy data

48 read-only

57 tools total

Community server · catalogue entry verified 29/06/2026

How to control Fabric Dw Mcp Cli ↓

TOOL MAP

What Fabric Dw Mcp Cli exposes to your agents

Read (48) Write / Execute (8) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Fabric Dw Mcp Cli tools

Destructive · High remove_audit_group The 'remove' prefix strongly implies deletion/removal of a configuration entity (an audit group). Execute · High clear_cache Clearing a cache on a data warehouse system is an operational action that triggers an external operation (invalidating cached query results or metadata), which is non-trivial and could impact performance or data consiste Execute · Critical execute_sql A tool that executes SQL commands can trigger queries, stored procedures, or other database operations whose effects are entirely argument-dependent. Write · Medium add_audit_group The 'add_audit_group' tool creates a new audit group, which modifies system configuration reversibly.

9 of Fabric Dw Mcp Cli's 57 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Fabric Dw Mcp Cli

PolicyLayer is an MCP gateway — it sits between your AI agents and Fabric Dw Mcp Cli, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "remove_audit_group": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_audit_group": {
    "limits": [
      {
        "counter": "add_audit_group_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "count_table_rows": {
    "limits": [
      {
        "counter": "count_table_rows_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Fabric Dw Mcp Cli — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON FABRIC DW MCP CLI →

Instant setup, no code required.

FULL CATALOGUE

All 57 Fabric Dw Mcp Cli tools

DESTRUCTIVE 1 tools

Destructive remove_audit_group remove_audit_group

EXECUTE 2 tools

Execute clear_cache clear_cache Execute execute_sql execute_sql

WRITE 6 tools

Write add_audit_group add_audit_group Write disable_audit disable_audit Write enable_audit enable_audit Write generate_dbt_profile generate_dbt_profile Write set_audit_action_groups set_audit_action_groups Write set_audit_retention set_audit_retention

READ 48 tools

Read count_table_rows count_table_rows Read count_view_rows count_view_rows Read get_audit_settings Fetch the current SQL audit settings for a warehouse or SQL analytics endpoint. Read get_cluster_columns get_cluster_columns Read get_function get_function Read get_procedure get_procedure Read get_query_plan get_query_plan Read get_restore_point Return a single restore point by ID. Read get_sql_endpoint Return details for a single SQL analytics endpoint (name or GUID). Read get_sql_pool Return details for a single SQL pool by name. Read get_sql_pools_status get_sql_pools_status Read get_table_columns get_table_columns Read get_table_health_metrics get_table_health_metrics Read get_view Fetch the full definition of a view (schema.view). Read get_view_columns get_view_columns Read get_warehouse Return details for a single warehouse (name or GUID). Read get_warehouse_settings get_warehouse_settings Read get_workspace Return details for a single workspace (name or GUID). Read kill_session Terminate a session on a warehouse by session_id. Read list_capacities List all Fabric capacities the caller has access to. Read list_connections Return all active SQL connections on a warehouse or SQL Analytics Endpoint. Read list_database_principals list_database_principals Read list_frequent_queries list_frequent_queries Read list_functions list_functions Read list_item_permissions list_item_permissions Read list_long_running_queries list_long_running_queries Read list_masked_columns list_masked_columns Read list_procedures list_procedures Read list_request_history list_request_history Read list_restore_points Return all restore points for a warehouse. Read list_running_queries Return all currently-executing queries on a warehouse or SQL Analytics Endpoint. Read list_schemas list_schemas Read list_security_policies list_security_policies Read list_session_history list_session_history Read list_snapshots Return all snapshots belonging to a warehouse. Read list_sql_endpoints list_sql_endpoints Read list_sql_permissions list_sql_permissions Read list_sql_pool_insights list_sql_pool_insights Read list_sql_pools Return the list of custom SQL pools for a workspace. Read list_statistics list_statistics Read list_tables List SQL tables on a warehouse or SQL Analytics Endpoint. Read list_views List SQL views on a warehouse or SQL Analytics Endpoint. Read list_warehouses list_warehouses Read list_workspaces List all Fabric workspaces the caller has access to. Read my_permissions my_permissions Read read_table read_table Read read_view read_view Read show_statistics show_statistics

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Fabric Dw Mcp Cli

Can an AI agent delete data through the Fabric Dw Mcp Cli MCP server? +

Yes. The Fabric Dw Mcp Cli server exposes 1 destructive tools including remove_audit_group. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Fabric Dw Mcp Cli? +

The Fabric Dw Mcp Cli server has 6 write tools including add_audit_group, disable_audit, enable_audit. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Fabric Dw Mcp Cli.

How many tools does the Fabric Dw Mcp Cli MCP server expose? +

57 tools across 4 categories: Destructive, Execute, Read, Write. 48 are read-only. 9 can modify, create, or delete data.

How do I enforce a policy on Fabric Dw Mcp Cli? +

Register the Fabric Dw Mcp Cli MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Fabric Dw Mcp Cli tool call.

Deterministic rules across all 57 Fabric Dw Mcp Cli tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON FABRIC DW MCP CLI →

Instant setup, no code required.

57 Fabric Dw Mcp Cli tools catalogued and risk-classified — across an index of 43,000+ MCP servers.