Doo S.

Row-Level Security, Column-Level Security, and Column Masking: Add secure views to a Share to filter rows, hide columns, or mask values for each consumer. Use current_user and is_role_in_session() to show each consumer different rows. Existing queries keep working, and consumers can't see a view's definition. Set them up in the UI or with CREATE SHARE and ALTER SHARE. Available on Business and Enterprise plans, including free trials.

Fine-grained access controls for Managed DuckLake: Table-level security and secure views are now supported for DuckLake databases. Only MotherDuck-hosted DuckLakes are supported.

Write-back for Dives: Dives are no longer read-only: viewers can now act on the data they see. Add buttons and forms that run a Flight, so viewers can approve orders, triage tickets, correct records, or refresh a pipeline right where they see the data, then see the result when the run finishes. Use the useRunFlight and useFlightRun hooks, or ask your AI agent to add a button.

Share Flights with run grants: Let teammates run a Flight you own without giving them your code, logs, or credentials. GRANT RUN ON FLIGHT to a user, a role, or your whole organization, and they can start it from SQL, an AI agent, or a Dive with write-back. The Flight always runs as its owner, with the owner's token and secrets, so a grant doesn't share any of the owner's other access. Grantees see the status of the runs they start, and each run records who started it.

Flight Explainer: A live progress monitor for every Flight run, including runs started from a Dive with write-back. See each step's status, rows, and timing, and exactly where a failed run broke. Click Add Flight Explainer support with AI on a Flight to set it up.

Flights are generally available: Flights have graduated from Preview and support HIPAA workloads. To process protected health information (PHI), you need a signed HIPAA BAA with MotherDuck. Existing BAAs cover Flights.

Guide commands in the MotherDuck CLI: Create, edit, and version Guides from your terminal with motherduck guide, and keep them in version control alongside your other source files. Refer to the guide command reference for details.

Table-level security: You can now share specific tables, views, or entire schemas instead of an entire database. Set an INCLUDE_PATTERN such as 'reporting.*, main.orders' when you create a share, change it later with ALTER SHARE, or set it from the share dialog in the UI. Available on Business and Enterprise plans. Refer to the documentation for pattern rules and limitations.

Custom roles available on Business: Business plan customers can now create custom roles, which inherit a preset role's platform permissions and can receive data grants directly.

[Preview] MotherDuck CLI: The motherduck CLI lets you authenticate (motherduck login, logout, status), run SQL queries, and build Dives and Flights from your terminal, with table, JSON, or CSV output for scripting and automation. Refer to the MotherDuck CLI documentation for details.

Windows install script for the DuckDB CLI: Windows users can install a MotherDuck-supported DuckDB CLI version with a single command, powershell -c "irm https://install.motherduck.com | iex". The script installs the motherduck extension and can save your MotherDuck token.

Create a database from a remote file: CREATE DATABASE ... FROM now accepts a remote DuckDB database file in cloud storage, for example CREATE DATABASE my_db FROM 's3://my-bucket/my.db'.

Favorites: Keep the content you use most at the top of the Object Explorer sidebar. Star Dives, Notebooks, Flights, Guides, databases, and shares, then organize them into folders and drag them into the order you want.

[Preview] Server-side Iceberg attach: Attach an external Apache Iceberg REST catalog to MotherDuck and query your Iceberg tables server-side, alongside your MotherDuck and DuckLake data. Available in Preview.

dbt Cloud support via the Postgres endpoint: You can now connect dbt Cloud to MotherDuck directly through the Postgres endpoint, without standing up a self-hosted pg_duckdb proxy.

[Preview] Launching Flights – agent-native data pipelines in MotherDuck: Build and deploy data pipelines using a flexible Python runtime, natively connected to your MotherDuck data – for ingest, transformation, warehouse replication, SaaS ETL, and more. Create and manage Flights via SQL, UI, or any MCP-capable AI agent. Available in Preview to Business and Enterprise plans. Read the announcement blog for more details and refer to the Flights documentation to get started.

Dives are generally available: Dives – interactive data apps you build from natural language and share across the MotherDuck UI, embeds, and MCP clients – have graduated from Preview to general availability (GA). Available on all plans.

MotherDuck Wasm Client 1.5.3-r.1: Each release of the Wasm Client pins a specific DuckDB version instead of tracking the MotherDuck web UI's DuckDB version dynamically, so your DuckDB version stays predictable across deployments. Check pragma version to confirm which version is in use. This release builds on DuckDB 1.5.3 and adds the terminateDuckDB function, which resets the shared in-browser DuckDB instance so you can recreate it. Refer to the Wasm Client documentation to learn more.

MotherDuck cloud coverage extends to Europe (Dublin) eu-west-1: MotherDuck is available on AWS in Europe (Dublin) eu-west-1. Create new Organizations in Dublin for lower latency and regional data residency.

Postgres wire protocol endpoint support for Looker: The Postgres Endpoint, a Postgres wire protocol-compatible MotherDuck client, now enables connectivity with Looker.

DuckDB & MotherDuck plugin for Obsidian: Run DuckDB SQL or MotherDuck queries from inside an Obsidian note, with results frozen as a markdown table directly below the query. Local DuckDB blocks run in Wasm with no account required; motherduck blocks reach your MotherDuck account for hybrid execution against shared databases. Install from the Obsidian Community Plugins directory.

Manual member deprovisioning: Organization admins can now deprovision and reactivate members directly from the Members page in Settings in the MotherDuck UI, without needing SCIM or an external identity provider.

Compound file extensions in Add Data: The Add Data UI now recognizes compound suffixes such as .parquet.zst, .csv.zst, and .parquet.snappy when detecting file types from object storage.

TOON-encoded responses from the MCP server: Responses from the MotherDuck remote MCP server are now encoded in TOON, a compact, token-efficient format for LLM consumption, reducing payload size on large result sets.

Pin a Dive version when embedding: Embed sessions now accept an optional version parameter so production embeds keep rendering a vetted Dive version even when the source Dive is edited. Omit it to follow the current version.

Dive Viewer in ChatGPT: The MCP Dive Viewer is now available as a ChatGPT app, rendering Dives inline in conversations.

"Open in MotherDuck" preserves Dive state: Clicking "Open in MotherDuck" from the MCP Dive Viewer now carries your current filters and selections through to the full MotherDuck UI.

Dive Viewer auto-refreshes stale tokens: Dives left open in browser tabs for hours no longer show "Invalid Token" errors. The session token now refreshes silently when the tab regains focus.

SCIM provisioning: MotherDuck now supports SCIM, so you can manage MotherDuck users from your identity provider. Available on Business and Enterprise plans. Refer to the documentation for more details.

Per-session database override for Dives: Embedded Dives and the view_dive MCP tool now accept a required_resources parameter that overrides the Dive's source-declared REQUIRED_DATABASES for the session. This lets you point a single Dive at different databases per tenant or environment.

Share Dives with their current view: Share a Dive along with its interactive state — filters, drill-downs, sort orders, selected views. In the MotherDuck UI, the state is captured in the URL fragment, so sharing the URL lands recipients on the same view. In embedded Dives, state changes emit postMessage events your host page can listen for and persist in your application.

Preconfigure Dives with a starting UI state: A new initial_state parameter on embed sessions and the view_dive MCP tool loads the Dive with specific filters and selections already applied.

Data exports from Dives in MCP apps: The MCP Dive Viewer now lets users export Dive results as CSV, Parquet, or XLSX.

Claude Cowork support for the Dive Viewer: The MCP Dive Viewer now renders Dives inline in Claude Cowork, alongside existing MCP client support.

Streamlined Dives sidebar: The Dives list in the Object Explorer is now capped at your 10 most recent Dives, with a new View all Dives link that opens the full searchable Dives table.

Wasm Client SDK no longer requires COI headers: The MotherDuck Wasm client SDK (now at version 1.5.2) no longer requires Cross-Origin Isolation (COI) headers, so custom DuckDB Wasm applications using LOAD motherduck can run in standard, non-COI environments. This change also brings faster transfers for larger payloads.

JIT provisioning enabled by default for SSO: When you activate SSO for the first time, Just-in-Time (JIT) provisioning is now on by default, so users from your verified domain can join the organization automatically on first login.

Link handling in Dives: When you click a link inside a Dive, MotherDuck surfaces a confirmation popup for external URLs so you can review the destination before opening it, and navigates directly for links that point inside the MotherDuck UI (for example, another Dive). Embedded Dives forward each click to the host page through a postMessage channel, so the parent app can apply its own navigation policy.

[Preview] Embedded Dives: MotherDuck Dives can now be embedded directly in your customer-facing applications. Create a Dive, generate an embed session, and drop an iframe into your app. Your end-users can explore data in real time, powered by MotherDuck. Embedded Dives currently require a Business plan. Read the announcement blog for more details or refer to the documentation to get started.

Airbyte Connector Certified: MotherDuck is now a certified Airbyte destination. Refer to the Airbyte destination documentation for more details.

Customizable Sidebar: The Object Explorer sidebar is now fully customizable. Right-click any section to show, hide, or reorder it — or access the customization dialog from the command menu or the org menu. Your expand/collapse state is persisted across sessions.