> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tablepro.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Safe Mode

> Per-connection query execution controls, from no restrictions to full read-only lockdown

# Safe Mode

Safe Mode is a per-connection setting that controls how TablePro handles query execution. Each connection can have its own level, from unrestricted access to complete write protection.

Set the Safe Mode level in the **Customization** pane of the connection form.

## Levels

TablePro provides 6 graduated Safe Mode levels:

| Level                | Write Queries           | Read Queries            | Authentication      |
| -------------------- | ----------------------- | ----------------------- | ------------------- |
| **Silent**           | Execute immediately     | Execute immediately     | None                |
| **Alert**            | Confirmation dialog     | Execute immediately     | None                |
| **Alert (Full)**     | Confirmation dialog     | Confirmation dialog     | None                |
| **Safe Mode**        | Confirmation + Touch ID | Execute immediately     | Touch ID / password |
| **Safe Mode (Full)** | Confirmation + Touch ID | Confirmation + Touch ID | Touch ID / password |
| **Read-Only**        | Blocked entirely        | Execute immediately     | None                |

New connections default to **Silent**.

## How It Works

### Silent

No restrictions. Queries execute immediately. TablePro still shows its built-in dangerous query warning for DROP, TRUNCATE, and DELETE-without-WHERE statements.

### Alert

A confirmation dialog appears before executing write queries (INSERT, UPDATE, DELETE, DROP, TRUNCATE, ALTER, etc.). The dialog shows a preview of the SQL to be executed. Read queries run without prompts.

### Alert (Full)

Same as Alert, but the confirmation dialog appears for ALL queries, including SELECT statements. Useful when you want to review every query before execution.

### Safe Mode

Like Alert, but after confirming the dialog, you must also authenticate with Touch ID. Falls back to your macOS password if Touch ID is unavailable.

### Safe Mode (Full)

Combines Alert (Full) and Safe Mode: every query requires both a confirmation dialog and Touch ID/password authentication.

### Read-Only

All write operations are blocked. The UI disables:

* Inline cell editing
* Adding, deleting, and duplicating rows
* Table truncate and drop operations
* Import functionality

Read queries (SELECT) execute normally.

## Drivers Without Read-Only Support

The Redis, MongoDB, and etcd drivers do not support read-only mode, so Safe Mode treats every query on these connections as a write. Alert and Safe Mode levels confirm every query; Read-Only blocks everything. Other non-SQL drivers (Cassandra, Elasticsearch, DynamoDB) classify reads and writes normally.

## Toolbar Badge

The current Safe Mode level appears as a badge in the toolbar (orange for Alert levels, red for Safe Mode and Read-Only). Click it to change levels.

<Frame caption="Safe Mode badge in the toolbar">
  <img className="block dark:hidden" src="https://mintcdn.com/ngquct/sezpSJY0oLylJ5LP/images/safe-mode-toolbar-badge.png?fit=max&auto=format&n=sezpSJY0oLylJ5LP&q=85&s=a56c3b04b5a9c7bfe05329d383253e31" alt="Safe Mode level badge and picker in the toolbar" width="1560" height="960" data-path="images/safe-mode-toolbar-badge.png" />

  <img className="hidden dark:block" src="https://mintcdn.com/ngquct/sezpSJY0oLylJ5LP/images/safe-mode-toolbar-badge-dark.png?fit=max&auto=format&n=sezpSJY0oLylJ5LP&q=85&s=0bf5ed21b12103738800abede3322cee" alt="Safe Mode level badge and picker in the toolbar" width="1560" height="960" data-path="images/safe-mode-toolbar-badge-dark.png" />
</Frame>

Changing the level from the badge applies to the whole connection and stays set as you open other tables and tabs. The saved default in the Customization pane is the level a connection starts at.

Safe Mode gates apply to query execution, saving cell edits, table operations, and sidebar changes.

## External Clients

Safe Mode runs inside the app on every query you execute. External clients (Raycast, Cursor, Claude Desktop, and other MCP clients) hit a separate gate first.

A write request from an external client clears three locks in this order:

1. **External Clients** (per-connection: **Blocked** / **Read Only** / **Read & Write**). Set in the connection form's **Advanced** pane. A Read Only connection rejects any write before the request reaches the database.
2. **Token scope** (per-integration, `readOnly` / `readWrite` / `fullAccess`). Issued by the [pairing flow](/external-api/pairing) and bounded by External Access: effective permission is `MIN(token.scope, connection.externalAccess)`.
3. **Safe Mode** (per-query). The same rules on this page apply once the request has been routed to the connection. Touch ID prompts and confirmation dialogs still appear, even for queries originating from an external client.

DROP and TRUNCATE always need an explicit confirmation phrase via the `confirm_destructive_operation` tool, regardless of token scope. See [External API security model](/external-api/index#security-model).