A managed Databricks MCP server provides tools for accessing Databricks services without requiring the team to host an external server. For structured table queries, a suitable managed SQL or Genie tool uses Databricks-governed data access. Unity Catalog remains responsible for authorization instead of delegating security decisions to the language model. When permissions must reflect the individual requester, the application must use the appropriate user authorization configuration so row filters and column masks are evaluated for that identity. Passing credentials in prompts exposes secrets unnecessarily. A self-managed virtual machine violates the infrastructure requirement. Direct JDBC access also fails the requested MCP architecture and introduces custom integration work. Managed hosting simplifies deployment while preserving the platform’s access-control model. Databricks tools documentation , authentication documentation