Custom SQL Tools and Reports

Custom SQL tools and reports use the same global MCP and database-pool authorization described in the preceding section. ORDS first checks that the caller can access the selected database, then evaluates any tool or report-specific authorization rules.

A custom SQL tool can define an additional scope or role requirement. the database-pool authorization and the custom SQL tool rule. If the caller does not satisfy the rule, ORDS does not include the custom SQL tool in tools/list.

The report tools report_list, report_sql, and report_execute are built-in ORDS MCP tools. Their availability in tools/list does not grant access to every report. Reports may have separate authorization rules for listing, viewing saved source, and execution. The caller must meet the rule for the requested operation.