Databricks MCP servers: Genie, SQL and AI Search for your AI assistant

Q: What is the Databricks MCP server URL?

Each workspace has its own. The pattern is https:// /ai-gateway/mcp-services/ ?o= , for example with system.ai.genie_one_mcp or system.ai.dbsql. In your workspace, open Unity Gateway, then MCPs, to copy it.

Q: Is the old Genie MCP address going away?

Yes. /api/2.0/mcp/genie stops working on November 30, 2026. Switch to system.ai.genie_one_mcp and the ai-gateway scope; the tools stay the same.

OfficialRemote

Get Docs

Tools: 6; 4 read · 2 change
Works in: 8; supported apps
Risk: Medium; can delete
Auth: OAuth; sign in, no key

Databricks' own servers that let your AI assistant ask Genie business questions, run SQL and search your data, all inside your workspace.

These are servers Databricks runs inside your own workspace, so there is nothing to install and every answer follows your Unity Catalog permissions. Start with Genie One for plain-language business questions, and use the Databricks SQL server when you or a coding agent want to run exact SQL. Each workspace has its own address, and some servers need an admin to switch on a preview first. Calls are billed as the Databricks product behind them, such as Genie or Databricks SQL.

Good for

Analysts who want Claude or ChatGPT to answer business questions from governed Databricks data
Data engineers who want Claude Code, Codex or Cursor to run and check SQL on a warehouse
Teams building agents that search documents in Databricks AI Search indexes
Admins who need every AI call to follow Unity Catalog permissions and policies

Works in

8 supported · 1 with issues · 4 should work

Tap an app to see how to set it up and any known problems.

Install Databricks managed MCP servers

Claude Code

Copy this prompt.

Add the Databricks managed MCP servers server to Claude Code. Run this command:

claude mcp add --transport http --scope user --client-id https://claude.ai/oauth/claude-code-client-metadata --callback-port 3118 databricks-tools "https://<workspace-hostname>/ai-gateway/mcp-services/<catalog>.<schema>.<service>?o=<workspace-id>"

Then check that it loaded and tell me if I need to sign in or restart.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires A Databricks workspace and permission to call the MCP.

Read-only mode: For the Databricks SQL server, ask an admin to set disallow_writes to true in its system.ai.dbsql_policy policy. The Genie servers only read data.

After adding it by hand, open Claude Code, run /mcp and sign in. With the helper, restart with ug claude. Install the helper first with uv tool install git+https://github.com/databricks/unity-gateway. Replace <workspace-hostname> and <workspace-id> with your workspace's values, and <catalog>.<schema>.<service> with the MCP name from Unity Gateway, then MCPs, such as system.ai.genie_one_mcp (Genie One) or system.ai.dbsql (Databricks SQL). The SQL, sandbox and web search servers need an account admin to enable the Unity Gateway beta first.

From the vendor's docs. Source.

Tools

Asks Genie a business question about your data in plain words
Sends your question to Genie, which works out which tables and metric definitions to use, writes and runs the SQL, and starts building an answer. Pass the same conversation to ask a follow-up.
Try: “What were our top five products by revenue last quarter?”
Read · genie_ask
Asks Genie a question and shows charts and progress inside the chat
Does the same as asking Genie a question, but in apps that support interactive views it opens a panel in the chat with Genie's progress, charts and final answer.
Try: “Show me weekly active users by region as a chart”
Read · view_ask
Runs a SQL query you or the assistant wrote on a Databricks SQL warehouse
Runs the exact SQL statement on one of your SQL warehouses with your own permissions. It can read tables and, unless an admin has made it read-only, change them too.
Try: “Count the rows in main.sales.orders for October”
Delete · execute_sql
Fetches the full table of results behind one of Genie's answers
Gets every row and column from a query Genie ran, for when the short answer in the chat was cut down to save space.
Try: “Give me the full result table for that last answer”
Read · genie_get_query_result
Used by the assistant behind the scenes
Checks on Genie's answer while it is still being worked out
The assistant uses this to keep checking on Genie's progress until the answer is ready, then returns it with links back to the sources in Databricks.
Read · genie_poll_response
Stops a Genie answer that is still running
Cancels a question Genie is still working on, for example when it was asked by mistake or is taking too long.
Write · genie_cancel_response

From the official docs

Pros and cons

Good

Built and run by Databricks inside your workspace, so there is nothing to install or host.
Unity Catalog permissions are enforced on every call.
Genie One answers business questions using your own metric definitions, which Databricks says beats raw SQL for accuracy.
Built-in sign-in clients for Claude, Claude Code, Cursor, Codex and ChatGPT, so most teams need no custom OAuth app.
Admins can grant access, add policies and trace calls through Unity Gateway.
On clients that support it, Genie shows charts and progress right in the chat.

Watch out

There is no single address; each workspace has its own URL to fill in.
The SQL, sandbox and web search servers need an account admin to turn on a beta.
The SQL server can write data unless an admin sets its read-only policy.
The old Genie address stops working on November 30, 2026.
Large query results are cut short in the chat.
Calls are billed as Genie, Databricks SQL, serverless compute or AI Search usage.

Permissions

medium risk · 4 things to watch

Medium risk

An agent using the SQL server can change tables you have write access to, because writes are allowed by default. Have an admin turn on the server's read-only policy, or sign in with an account that only has read access.

What it can do

Read your data
Create and change things
Delete things
Read-only modeHow to turn it on

Watch out for

The SQL server can change data by default
It allows writes until an admin turns on the disallow_writes setting in its policy. Do that before you let an agent run SQL on production tables. docs.databricks.com
Older workspace URLs skip gateway controls
The /api/2.0/mcp addresses bypass Unity Gateway tracing, grants, policies and guardrails. Prefer the Unity Gateway address for new setups. docs.databricks.com
Function tools run the code you registered
Unity Catalog functions and the code interpreter run Python or SQL as tools. Check what each function does before you expose it. docs.databricks.com
Your Unity Catalog permissions always apply
The assistant can only reach data the signed-in user or service principal can access. docs.databricks.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details

Turning on read-only	Databricks SQL MCP (system.ai.dbsql): set disallow_writes to true in the built-in system.ai.dbsql_policy policy through Unity Gateway. Genie One and Genie Agent only query data. Use a user or service principal with read-only Unity Catalog grants.
Talks to	Your Databricks workspace. Your AI provider, which receives query results. The public web, only if you use the web search server
Scopes	ai-gateway genie sql ai-search unity-catalog offline_access

Alternatives

Use the managed servers if your company already runs Databricks: they need no install and follow Unity Catalog permissions. Community servers fit only if you want to run something locally with a personal access token.

Server	Official	Runs	Sign-in	Can change things	GitHub stars
Databricks managed MCPThis page	Official	Hosted	Account	Yes	–
mcp-databricks-server	Community	Local	Token	Yes	43

Questions

What is the Databricks MCP server URL?

Each workspace has its own. The pattern is https://<workspace-hostname>/ai-gateway/mcp-services/<mcp-name>?o=<workspace-id>, for example with system.ai.genie_one_mcp or system.ai.dbsql. In your workspace, open Unity Gateway, then MCPs, to copy it.

Genie One, Genie Agent or Databricks SQL: which should I use?

Genie One for business questions across your workspace. A Genie Agent when you want answers from one curated set of tables. Databricks SQL when you or a coding agent want to run exact SQL.

Is it free?

There is no separate charge for the MCP servers. Each call is billed as the product behind it: Genie, Databricks SQL, serverless compute for functions, or AI Search.

Can it change or delete my data?

The SQL server can, because writes are allowed by default. An admin can make it read-only with the disallow_writes policy setting. The Genie servers only read.

Does an admin need to turn anything on?

Yes for some servers. The SQL, sandbox and web search servers need an account admin to enable the Unity Gateway beta. The older workspace addresses need a workspace admin to enable Managed MCP Servers.

Is the old Genie MCP address going away?

Yes. /api/2.0/mcp/genie stops working on November 30, 2026. Switch to system.ai.genie_one_mcp and the ai-gateway scope; the tools stay the same.

Can I use a personal access token instead of signing in?

Yes, for local testing. Databricks shows token setups for Cursor and Codex, but sign-in refreshes on its own and is the better choice for daily use.

Why won't my Claude connector connect?

Check that the right preview is turned on in your workspace. If your workspace limits IP addresses, a Databricks employee says you also need to allow Claude's IPs.

Is there a Databricks MCP server I can run locally?

Yes, but not as the main option. Databricks Field Engineering's AI Dev Kit includes a local server with 40+ tools, maintained on a best-effort basis, and several community servers use a personal access token.

Examples

Ask a business question in plain words and get a cited answer
What were our top five products by revenue last quarter?
Check the SQL connection works
Run SELECT 1 AS result
Source
Have a coding agent check SQL syntax while you write a data pipeline
Source

Information

updated Nov 1, 2026

Publisher: Official
Transport: Streamable HTTP
Auth: OAuth

Docs Official listing Install guide

Other Databricks MCP servers

See all

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 14

Add tools and skills · docs.databricks.com
Genie One MCP server · docs.databricks.com
Claude Code and Claude · docs.databricks.com
claude.com · claude.com
docs.databricks.com · docs.databricks.com
Codex · docs.databricks.com
Supported coding agents · docs.databricks.com
Cursor · docs.databricks.com
Databricks-provided MCPs · docs.databricks.com
Databricks SQL MCP server · docs.databricks.com
Unity Catalog functions MCP server · docs.databricks.com
Unable to connect Claude connector to Databricks MCP server (Genie) · community.databricks.com
databricks-solutions/ai-dev-kit · github.com
RafaelCartenet/mcp-databricks-server · github.com

Good for

Claude Code

Cursor

Windsurf

OpenAI Codex

Gemini CLI

GitHub Copilot CLI

ChatGPT (developer mode)

OpenCode

Claude Desktop

Known problems

VS Code (GitHub Copilot)

Cline

Zed

JetBrains AI Assistant

n8n