{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T01:25:58.088Z",
  "record_id": "VXI-EXT-TOOL-TRUST-DBT-01-v1",
  "record_kind": "external_reference",
  "title": "dbt MCP: Server variants and capability uncertainty",
  "system": "dbt MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Can a dbt remote MCP connection replace every local development workflow?",
  "near_questions": [
    "Can remote dbt MCP perform every local development task?",
    "Does a dbt plan include every API behind MCP?",
    "What should I do when tool documentation conflicts with a read-only claim?",
    "Which dbt server variant supports local CLI work?",
    "Can an agent use Semantic Layer data without local installation?",
    "Does turning off AI features disable all dbt MCP tools?",
    "What evidence establishes an administrative tool can change state?",
    "Which job artifacts are still available for retrieval?",
    "Can a saved source review replace inspecting the tool list?",
    "How should procurement record an unresolved capability claim?",
    "Can I preserve the dbt variant ambiguity for follow-up?",
    "When should remote dbt access be revalidated?"
  ],
  "supported_claims": [
    {
      "claim": "No. dbt distinguishes the remote consumption service from self-hosted local development. API availability also depends on the plan. The overview contains overlapping Administrative API descriptions and a broad read-only statement, so it does not settle every operation: inspect the actual tool list before approving job or development actions.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "No. dbt distinguishes the remote consumption service from self-hosted local development. API availability also depends on the plan. The overview contains overlapping Administrative API descriptions and a broad read-only statement, so it does not settle every operation: inspect the actual tool list before approving job or development actions.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-DATABRICKS-01-v1",
    "VXI-EXT-TOOL-TRUST-AMPLITUDE-01-v1",
    "VXI-EXT-TOOL-TRUST-MIXPANEL-01-v1",
    "VXI-EXT-TOOL-TRUST-POSTHOG-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "dbt MCP local and remote capabilities",
    "source_url": "https://docs.getdbt.com/docs/dbt-ai/about-mcp",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-DBT-01-v1",
    "candidate_record_sha256": "4271f3b533d42eea0259c418e3fb7c7baa771a30a1887a31858e192c880a91a5",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "No. dbt distinguishes the remote consumption service from self-hosted local development. API availability also depends on the plan. The overview contains overlapping Administrative API descriptions and a broad read-only statement, so it does not settle every operation: inspect the actual tool list before approving job or development actions.",
    "required_buyer_context": "Identify remote or self-hosted mode, plan, enabled APIs, authentication and discovered tool definitions.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "dbt MCP",
      "variant": "Self-hosted and remote server documentation"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "dbt provides the remote service and publishes the self-hosted server.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Expose metrics, metadata and supported dbt workflows.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Reads Semantic Layer results, metadata and available job artifacts.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "unknown",
        "statement": "The reviewed overview does not consistently establish every mutating operation across both variants.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "OAuth or token authentication depends on setup.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "review_inference",
        "statement": "Plan entitlements and discovered tools must be checked together.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Queried platform content enters the connected assistant.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "Treating variant guidance as a universal read-only guarantee can misclassify a task.",
        "source_ids": [
          "dbt"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Effective tool definitions and Administrative API write coverage remain unverified.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Clarify the server variant and operation when the overview is insufficient.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "dbt",
        "url": "https://docs.getdbt.com/docs/dbt-ai/about-mcp",
        "final_url": "https://docs.getdbt.com/docs/dbt-ai/about-mcp",
        "title": "dbt MCP local and remote capabilities",
        "checked_on": "2026-10-14",
        "sha256": "d8813ba850232113730ce984dcc00ac6aa07fd2eaaea6b3c132b63c8d733ee6a",
        "bytes": 63438
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Save documented variant limits and the unresolved capability question for supplier follow-up.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Recheck tool definitions, Administrative API wording and plan changes."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#dbt-mcp-local-remote-capability-trust",
  "machine_readable_record": "/varexis-index/records/dbt-mcp-local-remote-capability-trust.json"
}
