curl --request POST \
--url https://app.goosybear.ai/api/v1/tools/site.database.query \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"site_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"sql": "<string>",
"params": [
"<string>"
],
"workspace": "<string>"
}
'import requests
url = "https://app.goosybear.ai/api/v1/tools/site.database.query"
payload = {
"site_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"sql": "<string>",
"params": ["<string>"],
"workspace": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
site_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
sql: '<string>',
params: ['<string>'],
workspace: '<string>'
})
};
fetch('https://app.goosybear.ai/api/v1/tools/site.database.query', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://app.goosybear.ai/api/v1/tools/site.database.query",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'site_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'sql' => '<string>',
'params' => [
'<string>'
],
'workspace' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://app.goosybear.ai/api/v1/tools/site.database.query"
payload := strings.NewReader("{\n \"site_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"sql\": \"<string>\",\n \"params\": [\n \"<string>\"\n ],\n \"workspace\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://app.goosybear.ai/api/v1/tools/site.database.query")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"site_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"sql\": \"<string>\",\n \"params\": [\n \"<string>\"\n ],\n \"workspace\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://app.goosybear.ai/api/v1/tools/site.database.query")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"site_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"sql\": \"<string>\",\n \"params\": [\n \"<string>\"\n ],\n \"workspace\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"ok": true,
"site_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"rows": [
{}
],
"row_count": 123,
"truncated": true,
"rows_read": 123,
"workspace": "<string>",
"working_in": {
"label": "<string>",
"note": "<string>",
"workspace": "<string>",
"source": "call-override"
}
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}Call site.database.query
Answer questions about the records a site keeps in its own database — what it has published (its articles, episodes, posts or products, found by topic, author or date) and what its forms save (the people, sign-ups, bookings or orders): ‘how many people signed up through the site this week?’, ‘show me the newest orders’, ‘which products are out of stock?’. Call it on the question, before searching the workspace’s knowledge, since these records live only in the site’s database. Reads the database of the site open in the editor with one SELECT (or WITH … SELECT): learn its tables first with select name, sql from sqlite_master where type = 'table', and put every value in params as a ? placeholder. It answers at most 200 rows and says when there were more, and refuses any statement that could change data or schema. Not for changing those records or tables, which is site.database.execute, a workspace Data table, which is data.query, or what visitors did on the site’s pages (views, scrolls, button clicks, form starts, video plays), which analytics.query_metrics counts. Rows in a workspace Data table are data.query; what a site saved in its own database (its sign-ups, orders) is site.database.query.
Every result names the workspace it ran in. Say which workspace the answer is about. When the account has more than one workspace and none is selected, this tool refuses with workspace_ambiguous and lists the choices — offer them, never pick one.
curl --request POST \
--url https://app.goosybear.ai/api/v1/tools/site.database.query \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"site_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"sql": "<string>",
"params": [
"<string>"
],
"workspace": "<string>"
}
'import requests
url = "https://app.goosybear.ai/api/v1/tools/site.database.query"
payload = {
"site_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"sql": "<string>",
"params": ["<string>"],
"workspace": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
site_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
sql: '<string>',
params: ['<string>'],
workspace: '<string>'
})
};
fetch('https://app.goosybear.ai/api/v1/tools/site.database.query', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://app.goosybear.ai/api/v1/tools/site.database.query",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'site_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'sql' => '<string>',
'params' => [
'<string>'
],
'workspace' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://app.goosybear.ai/api/v1/tools/site.database.query"
payload := strings.NewReader("{\n \"site_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"sql\": \"<string>\",\n \"params\": [\n \"<string>\"\n ],\n \"workspace\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://app.goosybear.ai/api/v1/tools/site.database.query")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"site_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"sql\": \"<string>\",\n \"params\": [\n \"<string>\"\n ],\n \"workspace\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://app.goosybear.ai/api/v1/tools/site.database.query")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"site_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"sql\": \"<string>\",\n \"params\": [\n \"<string>\"\n ],\n \"workspace\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"ok": true,
"site_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"rows": [
{}
],
"row_count": 123,
"truncated": true,
"rows_read": 123,
"workspace": "<string>",
"working_in": {
"label": "<string>",
"note": "<string>",
"workspace": "<string>",
"source": "call-override"
}
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}{
"ok": false,
"code": "<string>",
"message": "<string>",
"error": {
"code": "<string>",
"message": "<string>",
"retry_after_seconds": 123
},
"retry_after_seconds": 123
}Authorizations
An API key minted at Settings › API & MCP. Send it as Authorization: Bearer <key>. A key carries its holder's own permissions, resolved on every call — revoking a membership closes the key's reach immediately. Keep it in an environment variable (GOOSY_API_KEY), never in a committed file.
Headers
Body
ONE read-only SQL statement for this site's own SQLite (D1) database. It must start with select or with, carry no semicolon, and change nothing; anything that inserts, updates, deletes, creates, drops, alters or sets a pragma is refused here. Put every value in params as a ? placeholder. To learn the schema, read select name, sql from sqlite_master where type = 'table' or select * from pragma_table_info('<table>').
1 - 8192Response
The call was admitted and dispatched. ok says whether the tool succeeded — a refusal the tool itself produced is still a 200, exactly as it is a successful JSON-RPC result over MCP.
- Option 1
- Option 2
The tool ran and answered.