34 tools from the Local Ydb MCP Server, categorised by risk level.
View the Local Ydb policy →local_ydb_auth_check Check anonymous viewer and CLI auth posture. local_ydb_bootstrap Bootstrap a tenant topology: static node, configured CMS tenant, and dynamic tenant node; choose this only for tenant, GraphShard, or dynamic-node ... local_ydb_bootstrap_root_database Bootstrap a plain local YDB database at /local with only a static node; choose this for generic local database requests. local_ydb_check_prerequisites Check target-host prerequisites and optionally install supported missing packages. local_ydb_container_logs Read recent logs from the static or dynamic local-ydb container. local_ydb_database_status Read database status via the YDB admin API. local_ydb_dump_tenant Dump the configured tenant using a local-ydb helper container. local_ydb_graphshard_check Check GraphShard capability and tablet visibility. local_ydb_inventory Collect Docker inventory for a local-ydb target profile. local_ydb_list_versions List published registry tags for a local-ydb container image, with numeric versions sorted newest first. local_ydb_nodes_check Check dynamic nodes through viewer/json nodelist. local_ydb_prepare_auth_config Prepare a hardened YDB config file from the current static-node config. local_ydb_pull_status Check the status of a background Docker image pull started by local_ydb_pull_image. local_ydb_reduce_storage_groups Reduce NumGroups for a tenant storage pool by dumping the tenant, rebuilding the profile stack with a smaller storagePoolCount, restoring the dump,... local_ydb_scheme List or describe YDB scheme objects with capped output. local_ydb_status_report Aggregate local-ydb inventory, auth, tenant, and node checks. local_ydb_storage_leftovers Find leftover local-ydb volumes, dumps, and PDisk paths. local_ydb_storage_placement Read storage pool and BSC physical placement. local_ydb_tenant_check Check tenant metadata reachability with the YDB CLI. local_ydb_upgrade_version Upgrade a file-backed, volume-backed local-ydb profile to a target image tag via image preflight, dump, rebuild, restore, auth reapply, extra-node ... local_ydb_add_dynamic_nodes Add extra dynamic tenant nodes one at a time and verify each reaches nodelist. local_ydb_add_storage_groups Increase NumGroups for a tenant storage pool using the current ReadStoragePool definition. local_ydb_apply_auth_hardening Apply a reviewed YDB config file and restart local-ydb. local_ydb_create_tenant Create the configured CMS tenant if missing. local_ydb_restore_tenant Restore the configured tenant from a named dump. local_ydb_set_root_password Rotate the runtime root password with ALTER USER and sync the host auth config and root password file to match. local_ydb_write_dynamic_auth_config Write a text-proto auth token file for mandatory-auth dynamic node startup. local_ydb_cleanup_storage Remove explicitly supplied local-ydb storage paths or volumes. local_ydb_destroy_stack Remove tenant metadata, local-ydb containers, network, and storage for a profile, with optional host-path cleanup. local_ydb_permissions List, grant, revoke, set, clear, chown, or toggle inheritance for YDB scheme permissions. local_ydb_remove_dynamic_nodes Remove extra dynamic tenant nodes one at a time and verify each disappears from nodelist. The Local Ydb MCP server exposes 34 tools across 4 categories: Read, Write, Destructive, Execute.
Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the Local Ydb server.
Local Ydb tools are categorised as Read (20), Write (7), Destructive (4), Execute (3). Each category has a recommended default policy.
Deterministic policy on every MCP tool call. Per-identity grants. Full audit log.