Live 72 Actions

Databricks MCP Server
for AI Agents

Q: What AI frameworks and AI clients does the StackOne Databricks MCP server support?

The StackOne Databricks MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Connect your AI agent to StackOne's Databricks MCP server and give it 72 MCP tools out of the box. Auth, tool execution, and security all managed.

Start Free Book Demo Read Docs →

Databricks MCP Server

Built by

StackOne

Coverage

72 Agent Actions

Create, read, update, and delete across Databricks — and extend your agent's capabilities with custom actions.

MCP Actions → Build Actions →

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Databricks MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Databricks tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Databricks call.

Tools Discovery →

What is the Databricks MCP Server?

A Databricks MCP server lets AI agents read and write Databricks data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Databricks MCP server ships with 72 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Databricks MCP Tools

Every action from Databricks's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

Log Delivery Configurations

Create Log Delivery Configuration
Create a new log delivery configuration for the Databricks account
List Log Delivery Configurations
Get all log delivery configurations for the Databricks account
Get Log Delivery Configuration
Get a specific log delivery configuration by ID for the Databricks account
Update Log Delivery Configuration
Enable or disable a log delivery configuration for the Databricks account

Budgets

Create Budget
Create a new budget configuration for the Databricks account
List Budgets
Get all budget configurations for the Databricks account
Get Budget
Get a specific budget configuration by ID for the Databricks account
Update Budget
Update an existing budget configuration by ID for the Databricks account
Delete Budget
Delete a budget configuration by ID from the Databricks account

Custom App Integrations

Create Custom App Integration
Create a new custom OAuth app integration for the Databricks account
List Custom App Integrations
Get all custom OAuth app integrations for the Databricks account
Get Custom App Integration
Get a specific custom OAuth app integration by ID
Update Custom App Integration
Update a custom OAuth app integration by ID
Delete Custom App Integration
Delete a custom OAuth app integration by ID

Groups

Create Group
Create a new group in the Databricks account
List Groups
Get all groups in the Databricks account
Get Group
Retrieve a specific group by ID
Update Group
Update an existing group's attributes
Delete Group
Remove a group from the Databricks account

Group Members

Add Group Member
Add a user or service principal to a group
Remove Group Member
Remove a user or service principal from a group

IP Access Lists

Create IP Access List
Create a new IP access list for the Databricks account
List IP Access Lists
Get all IP access lists for the Databricks account
Get IP Access List
Get a specific IP access list by ID for the Databricks account
Delete IP Access List
Delete an IP access list by ID from the Databricks account

Metastores

Create Metastore
Create a new Unity Catalog metastore for the Databricks account
List Metastores
Get all Unity Catalog metastores for the Databricks account
Get Metastore
Get a specific Unity Catalog metastore by ID for the Databricks account
Update Metastore
Update a Unity Catalog metastore by ID for the Databricks account
Delete Metastore
Delete a Unity Catalog metastore by ID from the Databricks account

Credential Configurations

Create Credential Configuration
Create a new credential configuration (cross-account IAM role) for the Databricks account
List Credential Configurations
List all credential configurations for the Databricks account
Get Credential Configuration
Get a specific credential configuration by ID for the Databricks account
Delete Credential Configuration
Delete a credential configuration by ID from the Databricks account

Storage Configurations

List Storage Configurations
List all storage configurations for the Databricks account
Get Storage Configuration
Get a specific storage configuration by ID for the Databricks account

Network Configurations

Create Network Configuration
Create a new network configuration (customer-managed VPC) for the Databricks account
List Network Configurations
List all network configurations for the Databricks account
Get Network Configuration
Get a specific network configuration by ID for the Databricks account
Delete Network Configuration
Delete a network configuration by ID from the Databricks account

Unified Groups

List Unified Groups
List unified groups in Databricks.
Get Unified Group
Get a unified Databricks group by ID.

Unified Organizations

List Unified Organizations
List unified organizations in Databricks.
Get Unified Organization
Get a unified Databricks organization by ID.

Unified Roles

List Unified Roles
List unified roles in Databricks.
Get Unified Role
Get a unified Databricks role by ID.

Unified Users

List Unified Users
List unified users in Databricks.
Get Unified User
Get a unified Databricks user by ID.

Service Principal Secrets

Create Service Principal Secret
Create a new secret for a Databricks service principal
List Service Principal Secrets
Get all OAuth client secrets for a Databricks service principal
Delete Service Principal Secret
Delete a secret from a Databricks service principal

Service Principals

Create Service Principal
Create a new service principal in the Databricks account
List Service Principals
Get all service principals in the Databricks account
Get Service Principal
Retrieve a specific service principal by ID
Update Service Principal
Update an existing service principal's attributes
Delete Service Principal
Remove a service principal from the Databricks account

Users

Create User
Create a new user in the Databricks account
List Users
Get all users in the Databricks account
Get User
Retrieve a specific user by ID
Update User
Update an existing user's attributes
Delete User
Remove a user from the Databricks account

Workspace Permission Assignments

List Workspace Permission Assignments
Get all permission assignments for a workspace in the Databricks account
Delete Workspace Permission Assignment
Delete a permission assignment for a principal in a workspace

Workspaces

List Workspaces
Get all workspaces in the Databricks account
Get Workspace
Get a workspace by ID in the Databricks account

Other (7)

Create Or Update Workspace Permission Assignment
Create or update a permission assignment for a principal in a workspace
Download Billable Usage
Download billable usage logs as CSV for a date range
List Metastore Workspace Assignments
Get all workspace IDs assigned to a Unity Catalog metastore
Get Workspace Metastore
Get the Unity Catalog metastore assigned to a workspace
Get Unified Credentials
Get the current Databricks connection's unified credentials and identity.
Delete Metastore From Workspace
Remove the Unity Catalog metastore assignment from a workspace
Assign Metastore To Workspace
Assign a Unity Catalog metastore to a workspace

Set Up Your Databricks MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Databricks in under 10 lines of code.

MCP Clients

Agent Frameworks

Claude Desktop-

JSON

Claude Desktop Docs

{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Check More Data Infrastructure MCP Servers

172+ actions

129+ actions

126+ actions

98+ actions

89+ actions

85+ actions

80+ actions

All Data Infrastructure MCP Servers →

Databricks Resources

How I Vibe-Coded a Customer Success Hub Using StackOne's AI Native Integration Platform

How a non-developer vibe-coded a customer success dashboard pulling HubSpot, Pylon, PostHog, Databricks, and Fireflies through StackOne's MCP gateway.

7 min read

MCP Code Mode: Keeping Tool Responses Out of Agent Context

Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.

11 min

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Indirect Prompt Injection Defense for MCP Tools: A Technical Guide

MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.

12 min

MCP vs A2A: Architecture, Security, and When to Use Each

MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.

12 min

MCP vs API: What 200+ Connector Builds Taught Us

MCP wraps APIs, it doesn't replace them. After building 200+ connectors that serve both, here's when each approach wins.

14 min read

Databricks MCP Server FAQ

Does StackOne have a Databricks MCP server?

Yes. StackOne offers a hosted Databricks MCP server with 72 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.

Databricks MCP server vs direct API integration — what's the difference?

A Databricks MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Databricks. A Databricks MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Databricks at runtime. StackOne provides both.

How does Databricks authentication work for AI agents?

Databricks authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Databricks account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.

Are Databricks MCP tools vulnerable to prompt injection?

Yes — Databricks MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.

What is the context bloat of a Databricks agent and how do I avoid it?

Context bloat happens when Databricks tool schemas and API responses eat your Databricks agent's memory, preventing it from reasoning effectively. A single Databricks query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.

Can I limit which actions my Databricks agent can access?

Yes — you can limit which actions your Databricks agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.

Can I create custom agent actions for my Databricks MCP server?

Yes — you can create custom agent actions for your Databricks MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Databricks's API, generate production-ready connector YAML, test against the live API, and validate before you ship.

When should I NOT use a Databricks MCP server?

Skip a Databricks MCP server if your integration is purely software-to-software — direct Databricks API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Databricks actions at runtime.

What AI frameworks and AI clients does the StackOne Databricks MCP server support?

The StackOne Databricks MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo

Databricks MCP Serverfor AI Agents