SQL Commands
Every SQL statement DeltaForge understands, from DDL and DML through catalog, security, pipeline, and graph commands.
API Endpoint
- ALTER API ENDPOINTModifies an existing API endpoint definition. Supports merging OPTIONS, changing the URL, changing the response format, and renaming.
- CALL API ENDPOINTRaw preview. Issues one fetch through the same HTTP transport as INVOKE and returns unmodified response bodies as (_page_index INT, _raw_body...
- CREATE API ENDPOINTDefines a single fetch endpoint under a REST API source. The endpoint knows how to fetch and write raw bytes to a storage zone; format and flatten...
- DESCRIBE API ENDPOINTShows the full stored definition of an API endpoint: URL template, response format, resolved option map, pagination strategy, current watermark, and...
- DROP API ENDPOINTRemoves an API endpoint definition and its run-log entries. Landed files in the storage zone are not deleted.
- INVOKE API ENDPOINTProduction fetch, writes response bodies to the connection's storage zone under a timestamped per-run folder. Honors the stored watermark unless...
- SHOW API ENDPOINT RUNSLists invocation history for a single API endpoint, one row per INVOKE, with run status, page/byte counts, watermark progression, and error summary...
- SHOW API ENDPOINTSLists all API endpoint definitions, optionally filtered by owning rest_api connection and/or a LIKE pattern on the endpoint name.
Assertions
Catalog
Configuration
- ALTER CONNECTIONModifies an existing connection: replaces options, swaps credential references, or renames.
- ALTER CREDENTIAL STORAGEModifies one or more attributes of an existing credential-storage backend: description, config options, active state, or name.
- ALTER EXTERNAL LOCATIONUpdates an existing external location's URL, bound credential, options, owner, or comment.
- ALTER STORAGE CREDENTIALUpdates an existing storage credential's options, owner, or comment. Replaces options atomically with the new set.
- ALTER VAULT / ALTER CREDENTIALModifies a vault entry: rotates encryption-key material, replaces a credential secret, updates metadata, or renames. VAULT and CREDENTIAL are...
- CREATE CONNECTIONRegisters an external-system connection (database, object store, git host, SFTP, or REST API) used by schema discovery and federated queries.
- CREATE CREDENTIAL STORAGERegisters a cloud key-vault-style credential-storage backend (Azure Key Vault, AWS Secrets Manager, or GCP Secret Manager) used to persist vault...
- CREATE EXTERNAL LOCATIONRegisters a storage URL bound to a storage credential as a managed external location.
- CREATE STORAGE CREDENTIALCreates a named storage credential that supplies authentication material to external locations.
- CREATE VAULT / CREATE CREDENTIALCreates a vault entry, either an encryption key (material generated by DeltaForge) or a credential (caller-supplied secret or pointer to an external...
- DESCRIBE CONNECTIONEmits metadata for a single connection. Sensitive option values are masked server-side.
- DESCRIBE CREDENTIAL STORAGEEmits metadata for a single credential-storage backend. Secret config material is never included.
- DESCRIBE EXTERNAL LOCATIONReturns the URL, credential binding, and metadata for an external location.
- DESCRIBE STORAGE CREDENTIALReturns metadata about a storage credential. Secret material is never returned.
- DESCRIBE VAULT / DESCRIBE CREDENTIALEmits metadata for a single vault entry. Secret material is never included in the output.
- DROP CONNECTIONRemoves a connection registration. External tables registered through this connection must be dropped or relocated first.
- DROP CREDENTIAL STORAGERemoves a credential-storage backend. Fails if any vault entries still reference it unless those entries are linked-external (metadata-only) pointers.
- DROP EXTERNAL LOCATIONRemoves an external location registration. The underlying storage and any data it contains are not touched.
- DROP STORAGE CREDENTIALRemoves a storage credential. Grants on the credential are also removed; external locations bound to the credential are NOT removed and lose their...
- DROP VAULT / DROP CREDENTIALRemoves a vault entry and wipes its backend-stored material. VAULT and CREDENTIAL are keyword aliases.
- SHOW CONNECTIONSLists all registered external connections, optionally filtered by a LIKE substring.
- SHOW CREDENTIAL STORAGESLists all registered credential-storage backends, optionally filtered by a LIKE pattern on display_name.
- SHOW EXTERNAL LOCATIONSLists all external locations, optionally filtered by a LIKE pattern.
- SHOW STORAGE CREDENTIALSLists all storage credentials, optionally filtered by a LIKE pattern.
- SHOW VAULTS / SHOW CREDENTIALSLists vault entries, optionally filtered by entry kind and a LIKE substring on display_name. VAULTS and CREDENTIALS are keyword aliases.
- TEST CONNECTIONProbes connectivity to the external system referenced by a connection, returning success/latency/error and server version where available.
- TEST CREDENTIAL STORAGERuns the reachability probe on a credential-storage backend (the same probe executed by the GUI 'Test' button).
Data Loading
DDL
- ALTER TABLE ADD COLUMNAdds a single column to an existing Delta table's schema.
- ALTER TABLE ADD COLUMNSAdds multiple columns to an existing Delta table in a single atomic operation.
- ALTER TABLE ADD CONSTRAINTAdds a CHECK, NOT NULL, PRIMARY KEY, or UNIQUE constraint to an existing Delta table.
- ALTER TABLE ALTER COLUMN DROP DEFAULTRemoves the default value expression from a column. INSERTs that omit the column afterward receive NULL (or fail if the column is NOT NULL).
- ALTER TABLE ALTER COLUMN DROP NOT NULLRemoves the NOT NULL constraint from a column, allowing null values.
- ALTER TABLE ALTER COLUMN SET DEFAULTSets a default value expression for a column. The expression is stored verbatim in the column's metadata and applied to subsequent INSERTs that omit...
- ALTER TABLE ALTER COLUMN SET METADATASets or updates JSON metadata on a column for type widening tracking, custom annotations, or feature-specific hints.
- ALTER TABLE ALTER COLUMN SET NOT NULLSets a column to NOT NULL, disallowing null values in future writes.
- ALTER TABLE ALTER COLUMN TYPEChanges the data type of an existing column via type widening. Requires the delta.enableTypeWidening table property.
- ALTER TABLE CHANGE COLUMNMoves an existing column to a new position in the table schema without rewriting data files.
- ALTER TABLE CLUSTER BYConfigures or disables liquid clustering on a Delta table.
- ALTER TABLE DROP COLUMNDrops a column from a Delta table's schema using column mapping. The physical data remains in Parquet files.
- ALTER TABLE DROP CONSTRAINTDrops a named CHECK or NOT NULL constraint from a Delta table.
- ALTER TABLE RENAME COLUMNRenames an existing column in a Delta table using column mapping. The physical column name in Parquet files remains unchanged.
- ALTER TABLE RENAME TORenames a table in the catalog and DataFusion session without modifying underlying Delta files.
- ALTER TABLE REPLACE COLUMNSReplaces the entire column schema of a Delta table with a new set of columns in a single atomic operation.
- ALTER TABLE SET TBLPROPERTIESSets one or more table properties on an existing Delta table, used to enable features such as column mapping, auto-optimize, type widening, and...
- ALTER TABLE UNSET TBLPROPERTIESRemoves one or more table properties from an existing Delta table.
- CREATE DELTA TABLECreates a new Delta table with an explicit schema, optional partitioning, liquid clustering, table properties, and an optional LOCATION. Supports...
- CREATE VIEWCreates or replaces a named view backed by a SQL query.
- DROP DELTA TABLERemoves a Delta table from the session and catalog. Optionally deletes the underlying physical data files.
- DROP FEATURERemoves a Delta table feature (e.g., deletion vectors, change data feed, type widening) and optionally truncates history to allow protocol downgrade.
- DROP VIEWRemoves one or more views from the catalog and DataFusion session.
DML
- DELETEDeletes rows from a Delta table matching an optional predicate, recording file-level remove and add actions in the transaction log.
- INSERT INTOInserts new rows into a Delta table from a VALUES clause or SELECT query, with support for append, overwrite, and partition-level overwrite modes.
- MERGE INTOPerforms an atomic upsert by combining INSERT, UPDATE, and DELETE actions in a single transaction, joining a source dataset against a target Delta...
- PARALLEL CREATE TABLE ASCreates a Delta table from a SELECT query by splitting the source on a numeric key column and running multiple writers concurrently.
- PARALLEL INSERT INTOInserts SELECT results into an existing Delta table by splitting the source on a numeric key column and running multiple writers concurrently.
- TRUNCATE TABLERemoves all rows from a Delta table while preserving the table schema, properties, and transaction history.
- UPDATEUpdates column values in rows of a Delta table that match an optional predicate, rewriting affected data files and recording the changes in the...
Graph
Incremental
Indexing
Maintenance
Metastore
Pipeline
Pseudonymisation
Security
- ALTER GROUP ADD USERAdds one or more users to a group.
- ALTER GROUP REMOVE USERRemoves one or more users from a group.
- ALTER ROLEUpdates an existing role's parent or comment.
- ALTER USERUpdates an existing user's default role or comment.
- CREATE GROUPCreates a group for collective role assignment.
- CREATE ROLECreates a role that bundles privileges and can inherit from a parent role.
- CREATE SERVICE PRINCIPALCreates a service principal: a non-human identity for automation, jobs, integrations, and pipelines.
- CREATE USERCreates a user identity in the catalog. Authentication material is provisioned separately by the identity provider; this command registers the...
- CREATE WORKSPACECreates a workspace boundary for isolating user assets, scripts, and pipelines.
- DROP GROUPRemoves a group. The Control Plane cascades the removal: memberships are deleted and direct grants on the group are revoked.
- DROP ROLERemoves a role. The Control Plane cascades the removal: role grants and direct object grants for this role are revoked.
- DROP SERVICE PRINCIPALRemoves a service principal. The Control Plane cascades the removal: role grants and direct object grants targeting the service principal are revoked.
- DROP USERRemoves a user identity. The Control Plane cascades the removal: role grants and direct object grants targeting the user are revoked.
- DROP WORKSPACERemoves a workspace. The Control Plane cascades the removal across the workspace's grants and metadata.
- GRANT ON EXTERNAL LOCATIONGrants one or more privileges on an external location to a principal. Supports WITH GRANT OPTION for delegated administration.
- GRANT ON SCHEMAGrants a single privilege on a schema to a user or role.
- GRANT ON STORAGE CREDENTIALGrants one or more privileges on a storage credential to a principal. Supports WITH GRANT OPTION.
- GRANT ON TABLEGrants a single privilege on a table to a user or role.
- GRANT ON ZONEGrants a single privilege on a zone to a user or role.
- GRANT ROLEGrants a role to a user, group, or service principal. Idempotent: re-granting an existing assignment succeeds without error.
- REVOKE ON EXTERNAL LOCATIONRevokes one or more privileges on an external location from a principal.
- REVOKE ON SCHEMARevokes a single privilege on a schema from a user or role.
- REVOKE ON STORAGE CREDENTIALRevokes one or more privileges on a storage credential from a principal.
- REVOKE ON TABLERevokes a single privilege on a table from a user or role.
- REVOKE ON ZONERevokes a single privilege on a zone from a user or role.
- REVOKE ROLERevokes a role from a user, group, or service principal. Idempotent: revoking a non-existent assignment succeeds without error.
- SHOW GRANTS ON EXTERNAL LOCATIONLists every principal that holds a privilege on a given external location.
- SHOW GRANTS ON STORAGE CREDENTIALLists every principal that holds a privilege on a given storage credential.
- SHOW GRANTS TO PRINCIPALLists every grant assigned to a principal across object types: roles, zones, schemas, tables, external locations, and storage credentials.
- SHOW GROUPSLists groups in the catalog, optionally filtered by a LIKE pattern.
- SHOW ROLESLists roles in the catalog, optionally filtered by a LIKE pattern.
- SHOW SERVICE PRINCIPALSLists service principals in the catalog, optionally filtered by a LIKE pattern.
- SHOW USERSLists users in the catalog, optionally filtered by a LIKE pattern.
- SHOW WORKSPACESLists workspaces in the catalog, optionally filtered by a LIKE pattern.
Select Grammar
Statistics
System
Table Info
- DESCRIBE CHECKPOINTLists transaction-log checkpoints for a Delta table, or returns detailed metadata for a single checkpoint version. Reports checkpoint format (V1...
- DESCRIBE DETAILReturns a comprehensive set of metadata properties for a Delta table, including format, location, partitioning, file counts, size, protocol...
- DESCRIBE HISTORYReturns the version history of a Delta table, showing each commit's version number, timestamp, operation type, operation metrics, file statistics...
- DESCRIBE TABLEReturns the schema of a Delta table, listing each column's name, data type, nullability, partition status, and optional comment.
- SHOW TABLE PROPERTIESReturns the configuration properties (tblproperties) stored in a Delta table's metadata, displayed as key-value pairs.
Utility
- COMPARE SCHEMACompares two schemas (from DDL strings or existing tables) and returns a detailed diff with generated ALTER TABLE statements for compatible changes...
- CREATE CHARTRenders an inline source query as an SVG chart and returns it in the execution result for the GUI to display.
- EXTRACT LINEAGEParses a SQL script and extracts table-level data lineage, returning inbound (read) and outbound (write) dependencies with catalog, schema, table...
- INFERTYPEExecutes a query or scans a table, then runs the type inference engine on the result columns to detect semantic data types, report confidence...
- SCRIPT TABLE AS CREATEGenerates a complete CREATE DELTA TABLE DDL script from an existing table's metadata, including column definitions, constraints, partitioning...
- SQLFORMATFormats a SQL string according to a configurable style preset, with optional overrides for indentation, keyword casing, comma placement, and line...