ADoor

Stages bytes from the client file object for COPY. The file object has download_url and file_id. import accepts ChatGPT files from files.oaiusercontent.com only. A Claude, Grok, or Muse URL is refused with FILE_URL_NOT_ALLOWED and is not fetched. A Claude or Grok conversation export inside that ChatGPT file is normalized under the same ceilings: 32 MiB download, 64 MiB of normalized JSON, 100000 conversations, and 1000000 messages. A ChatGPT export, CSV, and any other unrecognized file are staged unchanged. The result has transfer_id, an adoor:// URI, bytes, and SHA-256. Recognized exports also have format, conversations, and messages. Rows are not inserted. COPY FROM the returned URI loads the staged bytes. A completed COPY deletes the staged bytes. Otherwise they expire after six hours. SELECT adoor_file('close', '<transfer_id>') deletes them immediately. Pass spaceId to stage the file for one space. An archived space is refused with SPACE_ARCHIVED before a transfer is opened and before transfer quota is used. When spaceId is omitted, that same refusal applies when every space this connection can insert into is archived. openWorldHint is true because the file is downloaded from a ChatGPT file on files.oaiusercontent.com. import accepts ChatGPT files only. A Claude, Grok, or Muse URL is refused with FILE_URL_NOT_ALLOWED. Rows are not inserted.

import

Invite a person to this workspace by email. Needs manage_members. role is owner, editor, or viewer. Omitting role and permissions invites a viewer. A permission that names a table is refused when that table does not exist. The result has url and no invitation token. A missing capability names request_access.

invite_member

Leave this workspace. No management capability is required. The last owner is refused.

leave_workspace

List pending access requests in this workspace that this connection can inspect or act on. Needs inspect_access or manage_connections. A permission that names a space or table this connection cannot see is returned as hidden, with its actions and without that name.

list_access_requests

List pending invitations addressed to this account's verified email. Needs account_workspaces. Each row names that workspace. Invitations for any other email are omitted.

list_invitations

List foreign-key references this connection can see. Pass spaceId to limit the list to one space. A hidden field hides the relationship. Nothing is changed.

list_references

Move a table into another space in this workspace. Needs manage_spaces. A table or space this connection cannot see is not found, and its name is not returned.

move_table

Calls the ADoor API. Documentation: https://adoor.halmoslabs.com/docs/reference/mcp/. Run native PostgreSQL SELECT statements, including joins, expressions, CTEs and aggregates, or COPY a table or query TO 'adoor://new'. COPY TO uses ordinary read permission on the tables the query touches, including a single table or a filtered subset, and returns a download. The summary says how many rows were exported. It does not require the export capability. Row permissions and strict field errors are enforced by the database. Every SELECT response returns at most 1000 rows and sets truncated, nextCursor and rowCount. MCP defaults to 100 when limit and a constant SQL LIMIT are both absent. HTTP, the CLI and the SDK default to 1000. The SDK and the CLI follow nextCursor. A constant SQL LIMIT of 1000 or less is kept and truncated is false. A larger SQL LIMIT is paged at 1000. A page without ORDER BY can repeat or skip rows when other writes commit; ORDER BY a unique key. Multiple statements return ordered results and stop on the first error; each runs independently with current permissions. Nothing was written. The result includes connection so the answer can be attributed to this connection's workspace. context returns the same summary as scope, including the spaces on this grant and the access level. If the user names a different workspace, don't use this connection. This description is the same for every connection. The server instructions name the account, workspace, and spaces.

query

Read this account's id, display name, and email. Needs account_profile. The display name is the only profile field that changes immediately.

get_account

Read the current plan and storage allowance. Needs manage_billing. No card data is returned.

get_billing

Read usage against the plan caps. Needs inspect_access. period is YYYY-MM. Omit it for the current period. No card data is returned.

get_usage

Remove a person from this workspace and revoke that identity. Needs manage_members.

remove_member

Remove a foreign-key reference and keep the field and the rows. Needs create-table access in both spaces. A reference this connection cannot see is not found.

remove_reference

Rename a space this connection can see. Needs manage_spaces. The short name stays. A space this connection cannot see is not found, and its name is not returned.

rename_space

Rename this workspace or change its personal or team label. Needs manage_workspace. A missing capability names request_access.

rename_workspace

Change this account's display name. Needs account_profile. That is the only profile field changed immediately. Email is not accepted here.

rename_account

Request expanded authority through a prefilled human approval link. Name the access to add. Existing permissions and capabilities are kept. A request with no permissions, no capabilities and no moreSpaces is rejected. A capability alone, or moreSpaces alone with permissions [], is valid. Approval can only widen access. Name a space only when you can already see it. For a space you cannot see, send moreSpaces with the per-space grant (table or *, actions, and optional field or row limits) and no space id. The approving person chooses which spaces to include and can narrow the added grant. query, execute, context, history, undo, export, and request_access are always listed. Workspace and space tools, including spaces_create, spaces_archive, and spaces_unarchive, are always listed too. Sharing, organizing, billing, and account changes are separate tools, one per operation. import is listed for ChatGPT only. A call without the grant returns an error that names request_access. Allow everything can do anything this user can, including account, member, space, workspace, and billing changes. Regular data handling can read, write, import, undo, and history in one space. It cannot drop tables or wipe undo history. It cannot read another space, and a field its grant leaves out stays denied. It refuses account settings, members, invites, billing, deleting workspaces, and creating a space, and the error names request_access. Cautious can read that one space. Another space or anything more uses this tool and a one-tap approval link. A capability is requested the same way and applies only after a person approves it. This request grants nothing. The result leads with url (kind approval). approvalUrl is the same link. addedPermissions and addedCapabilities name only what this call adds. permissions is the full grant approval would apply. A duplicate pending request keeps that link and the previous reason, and the message says the previous reason was kept. A repeated request that matches a denied request returns status denied and kind denied. That result is not pending, grants nothing, and next says to call request_access with a different reason. It returns currentGrant for the access already held, and it does not return permissions or capabilities. A different reason can open a new pending request, and that result says the previous request was denied.

request_access

Email a pending invitation again and replace its link. Needs manage_members. The previous link stops working. The result says whether the email went out. No invitation token is returned.

resend_invitation

Approve or deny someone else's pending access request. Needs manage_connections. This connection cannot approve its own request, an ancestor, or a descendant session. That case returns the approval link and changes nothing. Optional permissions and capabilities can only narrow the grant.

resolve_access_request

Restore an archived space. It counts toward the space plan limit again and accepts changes. Restoring a space past that limit is rejected and nothing changes. Unarchiving a space that is already active changes nothing and says so. This needs manage_spaces and workspace-wide data scope, the same rule as creating a space.

spaces_unarchive

Revoke a connection so it stops working. The same authority as connections.revoke applies. No token is returned.

revoke_connection

Revoke a pending invitation so its link stops working. Needs manage_members. No token is returned.

revoke_invitation

Drop retained history images so the history budget can accept new rows. This can't be undone. Omit table to drop the oldest images until the workspace fits. Name a table to drop that table's undo images. Live rows stay. The result is counts, never row values. Regular access cannot wipe undo history. The owner can trim the workspace. A connection can trim one table it can delete.

trim_history

You can undo your own changes. Reverse one retained change, or pass ids to reverse several made by this connection. Ownership is the connection. A later grant change does not move earlier events to another connection. The current grant still has to allow write access to the columns that change touched. It does not need read access to the whole table or to every column, and it does not need the recover capability when every event is this connection's. Another connection's changes, a human's changes, and a batch that mixes both need the recover capability. For a caller without recover, an event that is not this connection's looks the same as an event that does not exist. A mixed batch changes nothing and does not name those events. A later edit that would be overwritten is left unchanged and nothing is committed. Pass id from history, or ids. ids are reversed newest first.

undo

Replace a child connection's permissions and optional capabilities. Needs manage_connections. permissions is required. The change stays within the caller's authority.

update_connection

Change a member's role, permissions, or capabilities, or the grant on a pending invitation. Needs manage_members. Pass at least one of role, permissions, or capabilities. Updating a pending invitation keeps the same link, sends no email, and does not spend the mailbox limit. A permission that names a missing table is refused.

update_member

Which account and workspace am I connected as? Lists the signed-in account and every workspace this connection can open, with names and slugs. Pass workspace with a slug on any tool to switch workspace. When this connection cannot write, the message says to call request_access for insert or update. Read this connection, the current workspace, the spaces and tables it can see, its permissions, and the expiry clocks. Each table includes rules for unique and check constraints whose fields are all readable, and indexes with id and columns. A rule or index that names a hidden field is omitted. effectiveExpiresAt is the earliest of this connection's expiresAt, each ancestor connection's expiresAt, the access credential's expiresAt, and a browser sign-in session's expiresAt when this call has one. A permission grant has no clock. An OAuth access token lasts 1 hour and is refreshed. tablesTruncated, spacesTruncated, connectionsTruncated and peopleTruncated are false when the list is complete. A truncated list includes the first 1000 items and names the next step. omitted names a field this connection cannot see and the next step. connections and people are included only when this connection can see them. No secret is included. installations lists apps in this workspace when this connection can see them. sessions lists task sessions this connection can see. accessRequests lists pending requests this connection can act on in this workspace. deniedAccessRequests lists this connection's own denied requests. status is denied. They are not pending. The message says to call request_access with a different reason. receivedInvitations lists invitations addressed to this account. When the only user space is the default space, the message says writing there is fine. When the plan can add a space, it suggests a dedicated space. When full access is at the space limit, the message names that default space and says no new space was created. fullAccess is true when access is everything: this connection can do anything this user can, including account, member, space, workspace, and billing changes, and workspaces created later. accessGuidance names the tier. Regular data handling can read, write, import, undo, and history in one space. It cannot drop tables or wipe undo history. It cannot read another space, and a field its grant leaves out stays denied. It refuses account settings, members, invites, billing, deleting workspaces, and creating a space, and the error says to call request_access. Cautious can read that one space, and anything more uses request_access. Only the user can choose Allow everything on the consent screen. This connection cannot grant itself more access. scope names this connection's workspace, the spaces on its grant, and its access level (Allow everything, Regular, Cautious, or Limited). If the user names a different workspace, don't use this connection.

context