{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-14T01:00:52.414Z", "record_id": "VXI-EXT-TOOL-TRUST-AIRTABLE-01-v1", "record_kind": "external_reference", "title": "Airtable MCP: Base access and automation drafts", "system": "Airtable MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Can an agent update my Airtable records without activating an automation?", "near_questions": [ "Can an agent update Airtable records without turning on automations?", "Which base should my assistant be allowed to change?", "Does interface access mean access to every base record?", "Can a read-only Airtable identity edit through MCP?", "What distinguishes an automation draft from activation?", "Does connecting Airtable approve every record change?", "What evidence should I request for base access?", "Can my assistant read confidential table data?", "How should I review a request to create a new base?", "Can an agent infer activation from a successful draft save?", "What should a saved Airtable permission review contain?", "When should I recheck an Airtable connector grant?" ], "supported_claims": [ { "claim": "Airtable documents record editing through MCP within the permissions of the connected user. Automation changes are saved as drafts and activation happens in the Airtable interface. Record-write access and permission to activate an automation are separate review questions; verify the selected bases, granted scopes and intended operation.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "Airtable documents record editing through MCP within the permissions of the connected user. Automation changes are saved as drafts and activation happens in the Airtable interface. Record-write access and permission to activate an automation are separate review questions; verify the selected bases, granted scopes and intended operation.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-BOX-REMOTE-01-v1", "VXI-EXT-TOOL-TRUST-MIRO-01-v1", "VXI-EXT-TOOL-TRUST-MONDAY-PLATFORM-01-v1", "VXI-EXT-TOOL-TRUST-INTERCOM-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Airtable MCP capabilities, permissions and automation drafts", "source_url": "https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-AIRTABLE-01-v1", "candidate_record_sha256": "78f19fad2495da3282434b41be533fdabde0c80178559bf5d04c11926d707ace", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Airtable documents record editing through MCP within the permissions of the connected user. Automation changes are saved as drafts and activation happens in the Airtable interface. Record-write access and permission to activate an automation are separate review questions; verify the selected bases, granted scopes and intended operation.", "required_buyer_context": "Identify the base or interface, connected identity, scopes, target records and whether the task requests a draft or activation.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Airtable MCP", "variant": "Airtable hosted server" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Airtable operates the documented hosted MCP service.", "source_ids": [ "airtable" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Connect an assistant to base data and supported workspace operations.", "source_ids": [ "airtable" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Reads accessible records, interfaces and automation configuration.", "source_ids": [ "airtable" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Creates or updates records and automation drafts; activation remains in the Airtable interface.", "source_ids": [ "airtable" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "OAuth connections and personal access tokens are documented.", "source_ids": [ "airtable" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Existing user permissions and the selected integration resources constrain access.", "source_ids": [ "airtable" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Returned base data enters the connected assistant; assess that assistant separately.", "source_ids": [ "airtable" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Ambiguous base selection or treating a draft as active can produce a mistaken outcome.", "source_ids": [ "airtable" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "The actual integration grants and buyer automation state have not been inspected.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Require an identified base and authorised change; do not report an automation as active from draft creation alone.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "airtable", "url": "https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server", "final_url": "https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server", "title": "Airtable MCP capabilities, permissions and automation drafts", "checked_on": "2026-10-14", "sha256": "16eaf03032c48c5fb06f8dd5d63f7b0d4a39f0f2e9566378a946cc5625c4c862", "bytes": 119168 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve the access and draft/activation distinction used when approving a records task.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck after base grants, scopes or automation capabilities change." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#airtable-mcp-base-and-draft-trust", "machine_readable_record": "/varexis-index/records/airtable-mcp-base-and-draft-trust.json" }