opbox

The tables.* family (44 verbs). Every verb enters through the one front door: it is capability-checked, permission-checked, scope-checked and audited before it runs (see Security & permissions). Each entry below lists its capability, risk class (which fixes the minimum autonomy level), the minimum caller permission, its availability tier, whether it is idempotent, and any outbound egress.

Bulk Updatetables.bulkUpdate

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

Filtered bulk UPDATE over the tables ENTITIES themselves (NOT table_rows - that is the separate tables.row.bulkUpdate). Always fenced to ctx.workspace_id; narrows by an OPTIONAL category AND/OR an OPTIONAL settings JSON-path equality (settingsPath = the key path, settingsEquals = the matched text value), then patches name over the matched rows. A narrowing filter (category and/or settingsPath) is REQUIRED so a workspace-wide rename is structurally unreachable. Serves template-detail.ts’s prisma.table.updateMany matter-board name sync (the table.updateMany over a JSON-path filter that had no kernel verb).

Call POST /v/tables.bulkUpdate with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.bulkUpdate.

Createtables.column.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.column.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.column.create.

Deletetables.column.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.column.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.column.delete.

Updatetables.column.update

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.column.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.column.update.

Createtables.columnGroup.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.columnGroup.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.columnGroup.create.

Deletetables.columnGroup.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.columnGroup.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.columnGroup.delete.

Updatetables.columnGroup.update

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.columnGroup.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.columnGroup.update.

Upserttables.columnGroup.upsert

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.columnGroup.upsert with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.columnGroup.upsert.

Createtables.comment.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.comment.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.comment.create.

Deletetables.comment.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.comment.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.comment.delete.

Reacttables.comment.react

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.comment.react with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.comment.react.

Unreacttables.comment.unreact

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.comment.unreact with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.comment.unreact.

Updatetables.comment.update

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.comment.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.comment.update.

Createtables.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.create.

Deletetables.delete

PropertyValue
Capabilitytable.write
Risk classSensitive - autonomy L2
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A sensitive operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.delete.

Cleartables.favourite.clear

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.favourite.clear with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.favourite.clear.

Settables.favourite.set

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.favourite.set with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.favourite.set.

Cleartables.follow.clear

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.follow.clear with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.follow.clear.

Settables.follow.set

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.follow.set with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.follow.set.

Recordtables.pageview.record

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.pageview.record with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.pageview.record.

Cleartables.permission.clear

PropertyValue
Capabilitytable.write
Risk classSensitive - autonomy L2
Min. permissionAdmin
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A sensitive operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.permission.clear with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.permission.clear.

Settables.permission.set

PropertyValue
Capabilitytable.write
Risk classSensitive - autonomy L2
Min. permissionAdmin
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A sensitive operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.permission.set with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.permission.set.

Cleartables.presence.clear

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.presence.clear with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.presence.clear.

Heartbeattables.presence.heartbeat

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.presence.heartbeat with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.presence.heartbeat.

Bulk Createtables.row.bulkCreate

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.row.bulkCreate with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.row.bulkCreate.

Bulk Deletetables.row.bulkDelete

PropertyValue
Capabilitytable.write
Risk classSensitive - autonomy L2
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A sensitive operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.row.bulkDelete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.row.bulkDelete.

Bulk Updatetables.row.bulkUpdate

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.row.bulkUpdate with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.row.bulkUpdate.

Createtables.row.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.row.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.row.create.

Deletetables.row.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.row.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.row.delete.

Createtables.row.revision.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.row.revision.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.row.revision.create.

Updatetables.row.update

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.row.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.row.update.

Createtables.rowLink.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.rowLink.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.rowLink.create.

Deletetables.rowLink.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.rowLink.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.rowLink.delete.

Createtables.rowNote.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.rowNote.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.rowNote.create.

Updatetables.rowNote.update

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.rowNote.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.rowNote.update.

Createtables.snapshot.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.snapshot.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.snapshot.create.

Deletetables.snapshot.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.snapshot.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.snapshot.delete.

Updatetables.update

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.update.

Createtables.view.create

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.view.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.view.create.

Deletetables.view.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.view.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.view.delete.

Updatetables.view.update

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.view.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.view.update.

Createtables.webhook.create

PropertyValue
Capabilitytable.write
Risk classSensitive - autonomy L2
Min. permissionAdmin
AvailabilityOn demand (MCP tier 2)
IdempotentNo
EgressNone - in-box (pure Postgres, no outbound call)

A sensitive operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.webhook.create with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.webhook.create.

Deletetables.webhook.delete

PropertyValue
Capabilitytable.write
Risk classWrite - autonomy L1
Min. permissionAdmin
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A write operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.webhook.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.webhook.delete.

Updatetables.webhook.update

PropertyValue
Capabilitytable.write
Risk classSensitive - autonomy L2
Min. permissionAdmin
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

A sensitive operation in the tables.* family. Called through the one governed front door: capability, permission tier, autonomy, scope and egress are all resolved before the handler runs, and the call is audited (INV-1, INV-8).

Call POST /v/tables.webhook.update with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool tables.webhook.update.