opbox

The savedquery.* family (3 verbs). Every verb enters through the one front door: it is capability-checked, permission-checked, scope-checked and audited before it runs (see Security & permissions). Each entry below lists its capability, risk class (which fixes the minimum autonomy level), the minimum caller permission, its availability tier, whether it is idempotent, and any outbound egress.

Createsavedquery.create

PropertyValue
Capabilityother.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

(route gates ADMIN). created_by_id = acting user.

Call POST /v/savedquery.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool savedquery.create.

Deletesavedquery.delete

PropertyValue
Capabilityother.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

RLS fence workspace_id.

Call POST /v/savedquery.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool savedquery.delete.

Updatesavedquery.update

PropertyValue
Capabilityother.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

Field-edit (name/description/sql/tags). RLS fence workspace_id.

Call POST /v/savedquery.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool savedquery.update.