Complete tool reference for the hosted RudderStack MCP server, including access classes and permission notes.
6 minute read
The hosted endpoint exposes the following tools. Availability depends on your RudderStack plan, enabled products, workspace permissions, and server configuration. Tools use your RudderStack user and workspace permissions. There are no separate per-tool OAuth scopes.
Read tools inspect data without persisting a control-plane change.
Sensitive execution tools don’t persist control-plane configuration, but execute code or submit temporary warehouse work. Review and confirm these tool calls in your MCP client before running them. Don’t configure agents to auto-approve them.
Write tools persist session state or change control-plane configuration. Review and confirm these tool calls in your MCP client before running them.
User and workspace tools
Tool name
Description
Access
Permission notes
user_details
Gets the current user, accessible workspaces, and active workspace context.
Read
Authorized user access
user_switch_workspace
Changes and persists the active workspace for the MCP session.
Write
Access to the selected workspace
get_workspace_settings
Gets details and settings for the current workspace.
Read
Current workspace access
list_connections
Lists source-to-destination connections.
Read
Current workspace access
get_billing_details
Gets contract volume, plan, organization, and owner information.
Read
Authorized organization access
Source tools
Tool name
Description
Access
Permission notes
list_sources
Lists configured event stream and Reverse ETL sources.
Read
Source access
get_source
Gets source configuration, Tracking Plans, and connected destinations.
Read
Source access
get_source_definitions
Gets source definition metadata, schemas, and capabilities.
Read
Source access
get_source_event_schemas
Gets incoming event schemas for a source.
Read
Source access
get_source_event_metrics
Gets source event volume and filtering metrics.
Read
Source access
get_source_tracking_plans_and_versions
Gets a source’s Tracking Plan associations and versions.
Read
Source and Tracking Plan access
get_source_tracking_plan_event_metrics
Gets Tracking Plan validation and violation metrics.
Read
Source and Tracking Plan access
get_source_tracking_plan_event_violations
Gets Tracking Plan validation failures and redacted samples when available.
Read
Source and Tracking Plan access
get_source_event_names_similarity
Finds similar or duplicate source event names.
Read
Source access
get_source_event_properties
Gets observed property types and frequency for an event.
Read
Source access
Destination tools
Tool name
Description
Access
Permission notes
list_destinations
Lists workspace destinations.
Read
Destination access
get_destination
Gets destination configuration, connected sources, and transformations.
Read
Destination access
get_destinations_errors
Gets delivery failures and redacted samples when available.
Read
Destination access
get_destination_event_metrics
Gets delivery success, failure, and filtering metrics.
Read
Destination access
get_destination_definitions
Gets destination definition metadata, schemas, and capabilities.
Read
Destination access
get_destination_latency_metrics
Gets destination latency over time.
Read
Destination access
Transformation and library tools
Tool name
Description
Access
Permission notes
transformation_test_new
Executes unsaved JavaScript or Python transformation code against supplied events without saving it.
Sensitive execution
Transformation access; code can make outbound requests
transformation_test_existing
Executes a saved transformation against supplied events without changing it.
Sensitive execution
Transformation access; code can make outbound requests
sample_transformations
Lists pre-built transformation templates.
Read
Transformation access
upsert_transformation
Creates or updates a JavaScript or Python transformation.
Write
Transformation write access
connect_transformation_destination
Attaches a transformation to a destination.
Write
Transformation and destination write access
list_transformations
Lists transformations and their destination connections.
Read
Transformation access
get_transformation
Gets transformation details, source code, and configuration.
Read
Transformation access
get_transformation_event_metrics
Gets transformation volumes, outcomes, and errors over time.
Read
Transformation access
get_transformation_latency_metrics
Gets transformation latency over time.
Read
Transformation access
list_transformation_libraries
Lists custom workspace transformation libraries.
Read
Transformation library access
get_transformation_library
Gets a custom transformation library, including source code.
Warehouse, Reverse ETL, Tracking Plan, and Data Catalog tools
Tool name
Description
Access
Permission notes
get_warehouse_uploads
Gets warehouse upload history, status, and optional table details.
Read
Warehouse destination access
get_warehouse_upload_with_tables
Gets table-level details for one warehouse upload.
Read
Warehouse destination access
get_retl_source_syncs
Gets Reverse ETL sync results, metrics, and timing.
Read
Reverse ETL source access
list_tracking_plans
Lists Tracking Plans and governance rules.
Read
Tracking Plan access
list_tracking_plan_events
Lists Tracking Plan events and optional schemas.
Read
Tracking Plan access
list_data_catalog_events
Lists events in the Data Catalog.
Read
Data Catalog access
list_data_catalog_properties
Lists event properties in the Data Catalog.
Read
Data Catalog access
Live event and profile tools
Tool name
Description
Access
Permission notes
get_live_events
Polls real-time source, destination, and transformation events. Turns on live-event capture for the selected entity.
Read
Pipeline access — the server doesn’t annotate this tool as read-only because it enables live-event capture, though it changes no configuration. Live event content can be sensitive even when fields are redacted or hashed
list_profiles
Lists profile projects for the workspace.
Read
Profiles access
get_profile_details
Gets profile models, statistics, cohort features, or history.
Read
Profiles access
get_profile_artifacts
Lists task artifacts or retrieves artifact file content.
Read
Profiles access
Audit log and audience tools
Tool name
Description
Access
Permission notes
audit_logs
Lists workspace audit log entries.
Read
Audit log access
list_audience_subjects
Lists data graph entities that can be audience subjects.
Read
Profiles and Audiences access
get_audience_model_context
Gets model attributes, relationships, neighbors, and peer audiences.
Read
Profiles and Audiences access
load_audience_skill
Loads the audience expression grammar used to construct valid requests.
Read
Profiles and Audiences access
create_audience
Creates and persists a data graph audience.
Write
Audience write access
update_audience
Updates a persisted data graph audience.
Write
Audience write access
get_audience
Gets an audience and its stored expression and metadata.
Read
Audience access
preview_audience
Submits temporary warehouse work to estimate audience size.
Sensitive execution
Profiles, Audiences, and warehouse access
Activation tools
get_audience_destination_schema and connect_audience_destination are always available. The hosted server exposes the remaining four tools in this section only when audience activation is enabled for your workspace.
Tool name
Description
Access
Permission notes
get_audience_destination_schema
Gets valid destination fields and destination-side audiences.
Read
Audience and destination access
connect_audience_destination
Persists an audience-to-destination activation connection.
Write
Audience and destination write access
plan_audience_activation
Plans a destination activation for an audience before creating resources.
Read
Audience and destination access; requires the audience activation feature
create_audience_activation
Creates audience activation resources, including the destination and Reverse ETL sync required for activation.
Write
Audience, destination, and Reverse ETL write access; requires the audience activation feature
trigger_sync
Starts an activation sync run. This can update or remove members in the downstream ad-platform audience depending on the configured sync.
Write
Audience and Reverse ETL write access; requires the audience activation feature
list_sync_runs
Lists activation sync runs and their statuses.
Read
Audience and Reverse ETL access; requires the audience activation feature
Documentation and service status tools
The hosted server exposes these tools only when the corresponding integration is configured.
Tool name
Description
Access
Permission notes
search_docs
Searches RudderStack documentation.
Read
Requires the documentation integration
ask_docs
Gets a documentation-grounded answer with citations.
Read
Requires the documentation integration
list_statuspage_incidents
Lists recent RudderStack status page incidents.
Read
Requires the Statuspage integration
get_statuspage_incident
Gets an incident, its updates, and affected components.
Read
Requires the Statuspage integration
When all optional integrations and audience activation are configured, the hosted endpoint exposes 62 tools: 51 read tools, three sensitive execution tools, and eight write tools.
See more
RudderStack MCP: Covers capabilities, example prompts, and security considerations.
This site uses cookies to improve your experience. If you want to learn more about cookies and why we use them, visit our cookie policy. We'll assume you're ok with this, but you can opt-out if you wish
Privacy Overview
This site uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are as essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.