OptionalincludeTool names or prefix patterns to expose from the MCP server. Use exact
tool names or prefix patterns such as read_*. An empty list exposes all
tools. At most 1,024 selectors are allowed, and each selector can contain
at most 256 characters.
OptionalrateRate limits for tool invocations. Supported scopes are user, group, service principal, the service as a whole, and each user by default. Request and token limits are supported. Empty when no rate limit is configured.
OptionalsourcePolymorphic reference to where the MCP server lives.
(-- MCP_SERVICE is a single-kind securable (MCP_SERVICE_STANDARD) with three
source variants: source_connection (a UC Connection FQN), internal (a
Databricks-hosted MCP server), and source_app (a Databricks App). Future
MANAGED variants (if introduced) would slot additional oneof entries here.
JSON shape: the active oneof variant appears as a sibling field on config
(proto JSON does not nest the oneof container name). E.g.:
{ "config": {
"source_connection": {"name": "connections/main.default.gh"},
"include_tool_selectors": ["read_*"], ...
} }
{ "config": { "internal": {}, ... } }
{ "config": { "source_app": {"name": "my-mcp-app"}, ... } }
Future variants slot in the same way, e.g. {"config": {"genie": {...}}}.
The oneof shape lets future kinds add type-specific reference shapes
without a wire-format bump. --)
Unity Catalog connection referencing the MCP server. Required on Create.
Operational configuration for an MCP service. Groups the source reference, tool selectors, and rate limits -- the fields that configure how the MCP service behaves at invocation time.