Generated banner for Dataflows CLI
Generated logo for Dataflows CLI

Dataflows CLI

MicrosoftOfficialPublished by Microsoft

  • Skill
  • Tool integration
  • Automation and integrations
  • MIT
  • Low risk
  • Has scripts

From the author

Manages Fabric Dataflow Gen2 items, including creation, M editing, connections, output destinations, getDefinition and updateDefinition inspection, executeQuery, refresh history, and Gen1-to-Gen2 save-as upgrades via saveAsNativeArtifact. Use for Dataflow items or Power Query M definitions. For pipeline JSON use pipeline-migration; for Spark or Warehouse transformations use their own skills.
— the description by Microsoft

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

The dataflows-cli skill provides a structured interface for interacting with Fabric Dataflow Gen2 items. It operates as a mode-based dispatcher, requiring users to select between authoring, consumption, or upgrade modes. The skill handles complex tasks such as M language definition updates, connection management, output destination configuration, and the migration of legacy Gen1 dataflows to Gen2.1. It emphasizes safe, intentional operations by requiring users to read specific reference documentation before executing state-changing API calls.

What it does

  • Creates and updates Fabric Dataflow Gen2 items and their definitions.
  • Manages connections, credentials, and output destinations for dataflows.
  • Previews Power Query M definitions using executeQuery to validate logic before persistence.
  • Facilitates the upgrade of Gen1 dataflows to Gen2.1 via save-as operations.
  • Retrieves refresh history and inspects existing dataflow definitions.
  • Provides a framework for executing and testing ad-hoc M queries.

When to use it

  • When you need to programmatically create or modify Fabric Dataflow Gen2 items.
  • When performing maintenance on Power Query M definitions or data connections.
  • When migrating legacy Gen1 dataflows to the Gen2.1 architecture.
  • When you need to audit refresh history or validate dataflow configurations.
  • When testing M query logic against live data sources before saving changes.

Advantages

  • Enforces a structured, mode-based workflow to prevent accidental mutations.
  • Provides granular control over Dataflow Gen2 definitions and metadata.
  • Supports complex lifecycle tasks like Gen1-to-Gen2 upgrades.
  • Integrates directly with Fabric REST APIs for automated data pipeline management.

Usage examples

“Show me the refresh history and parameters of the SalesIngest dataflow.”
The agent enters consumption mode, reads the consumption reference, and retrieves the requested refresh history and parameters for the specified dataflow.
“Preview this M query, then save it into the SalesIngest dataflow definition.”
The agent enters authoring mode, previews the M query to validate it, and then executes the updateDefinition call to persist the changes.
“Is my Gen1 dataflow ready to upgrade to Gen2.1?”
The agent enters upgrade mode, performs a readiness assessment, and reports on the risk and requirements for upgrading the specified Gen1 dataflow.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/microsoft/dataflows-cli/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip dataflows-cli.zip -d .agents/skills

Documentation by Microsoft

Telemetry — MANDATORY. Every api.fabric.microsoft.com call must carry x-ms-fabric-skill: dataflows-cli (az rest: --headers "x-ms-fabric-skill=dataflows-cli"), including every LRO poll, fabric_lro and retry. Snippets omit it — add it anyway.

CRITICAL NOTES

  1. To find the workspace details (including its ID) from workspace name: list all workspaces and, then, use JMESPath filtering

  2. To find the item details (including its ID) from workspace ID, item type, and item name: list all items of that type in that workspace and, then, use JMESPath filtering

  3. Skill disambiguation: use dataflows-cli for every Fabric Dataflow Gen2 item and Power Query M concern. Synapse / ADF pipeline and dataset JSON translation is pipeline-migration; Spark notebook transformations are spark-cli; T-SQL transformations are sqldw-cli.

Fabric Dataflow Gen2 -- CLI Skill

This one skill owns Fabric Dataflow Gen2 items: connections, Power Query M, output destinations, saved definitions, refresh history, and Gen1 upgrades.

It is a mode dispatcher and contains NO procedures. Pick the mode that matches the request from the table below, then read the matching references/<mode>.md file end to end with your file-reading tool BEFORE issuing a single command. That file holds the endpoints, payload shapes, templates and gotchas; acting without it produces wrong payloads and wrong results.

Read it once per session. A file you have already read stays in context, so do not re-read it on a later turn; open the deeper files under references/<mode>/ only when a row in that file's reference table matches what you still need, and open only that row's file.

Mode selection

ModeUse when the request ...Example triggersRead this first
authoringcreates or changes a dataflow: connections, credentials, M edits previewed before save, output destinations, updateDefinitionexecuteQuery preview, updateDefinition, connection setup, supportedConnectionTypes, credentialType, add output destinationreferences/authoring.md
consumptionreads a saved dataflow: definition, parameters, refresh history, or runs a saved/ad-hoc read-only M query and parses ArrowgetDefinition, executeQuery saved query, ad-hoc query, Arrow IPC, refresh historyreferences/consumption.md
upgradeupgrades a Gen1 dataflow to Gen2.1 via save-as and rebind, or assesses upgrade readiness/riskGen1 Gen2 readiness, saveAsNativeArtifact, clone Gen1 dataflow, upgrade risk assessmentreferences/upgrade.md
Mode boundary rule

consumption is read-only. A preview run that exists to validate M before updateDefinition, and any capability lookup (supportedConnectionTypes, credentialType), belong to authoring even though they issue the same executeQuery call -- classify by intent, not by endpoint.

If a request genuinely spans modes, handle them one at a time and read each reference before you start that part. If the mode is ambiguous after reading this table, ask one short clarifying question instead of guessing.

Terminal write -- the step you must not skip

Reading the reference and planning the change is NOT completing the task. Each mutating mode ends with one state-changing call. If you did not issue it, nothing was persisted -- say so explicitly rather than reporting success.

ModeTerminal write
authoringPOST /v1/workspaces/{ws}/dataflows/{id}/updateDefinition to persist the M, connections and output destinations; a NEW dataflow needs POST /v1/workspaces/{ws}/items (or /dataflows) first. executeQuery is a preview and writes nothing. If the user asked for a refresh, also POST .../jobs/instances?jobType=Refresh.
consumptionnone -- this mode is read-only
upgradesaveAsNativeArtifact to create the Gen2.1 artefact, then rebind. A readiness report alone does not upgrade anything.

Before you report the task done, confirm the terminal call returned success and, where the reference documents a readback, read the artefact back to prove the change landed.

upgrade generation boundary -- HARD STOP (mandatory)

Save-as runs only from Gen1 to Gen2.1. For an execution request whose source is Gen2, or whose source generation is not established, state that no public save-as or in-place upgrade endpoint is available and stop before any API call. This does not block a read-only readiness scan whose purpose is to discover and classify Gen1 candidates.

Do not read "choose the closest endpoint and proceed" as approval to export a definition and create a copy, do not switch to authoring to do it instead, and do not mutate anything. Ask the user to clarify the intended outcome and to approve explicitly.

consumption reporting

consumption has no terminal write, so its deliverable is the answer itself. When that mode runs executeQuery, name the operation you called and state the QueryName you sent, verbatim, next to the results, plus whether it was a saved shared member or a non-persisted ad-hoc customMashupDocument. Rows alone do not tell the user which call produced them.

This applies to consumption only. In authoring, executeQuery is an intermediate preview step -- do not add reporting turns around it; go on to the terminal write.

Shared essentials (all modes)

Resolve the workspace and item first; every mode depends on it.

TaskReferenceNotes
Finding Workspaces and Items in FabricCOMMON-CLI.mdMandatory -- read before resolving any workspace or item id
Fabric Topology & Key ConceptsCOMMON-CORE.mdItem types, workspaces, capacities
Environment URLsCOMMON-CORE.mdSovereign / non-public cloud hosts
Authentication & Token AcquisitionCOMMON-CORE.mdWrong audience = 401; read before any auth issue
Authentication RecipesCOMMON-CLI.mdaz login flows and token acquisition
Core Control-Plane REST APIsCOMMON-CORE.mdPagination, LRO polling, rate limiting
Gotchas & TroubleshootingCOMMON-CLI.mdaz rest audience, shell escaping, token expiry

Rules

MUST
  • Select exactly one mode from the table above before doing anything else.

  • Read references/<mode>.md end to end, as your FIRST tool call, before the first command of that mode. Read it ONCE, in a single full read: do not re-open it, do not grep it again, and do not page through it. You already have it.

  • Resolve workspace and item ids by listing and filtering, never by guessing a GUID.

  • Announce a mode switch explicitly when the request crosses a boundary.

  • Treat the reference as instructions, never as the deliverable. After reading it, RUN the documented commands against the live workspace and report the real results. Quoting what the reference says instead of executing it does not answer the request.

  • When a question about what Fabric supports IS the deliverable -- supported connection types, a connector's parameters, available credential types -- answer it from the endpoint the reference names rather than from the reference's own list, and name that endpoint in your answer. Whichever mode you are in: the reader cannot tell a live value from a quoted one unless you say where it came from. This is wording in the final answer, not an extra step.

  • Produce every artefact the user asked for, under the name they used. Running the right API calls is not a substitute for the requested report: if the request names a deliverable, emit it, and keep its heading even when the finding is "none" or "not applicable".

PREFER
  • The narrowest mode that satisfies the request.

  • Reading exactly ONE mode reference. Load a second only when the request genuinely spans modes, and say so before you do.

  • Reporting the mode you chose in your first response so the user can correct you.

AVOID
  • Acting from this dispatcher alone -- it intentionally omits the operational detail.

  • Answering with a summary of the reference instead of executing it.

  • Re-reading or re-grepping a reference you already loaded; it costs turns and tokens.

  • Mutating anything while in a read-only mode.

  • Loading a different skill for work this skill already owns (see CRITICAL NOTES 3).

Examples

User requestModeReference to read
"Show me the refresh history and parameters of the SalesIngest dataflow."consumptionreferences/consumption.md
"Preview this M query, then save it into the SalesIngest dataflow definition."authoringreferences/authoring.md
"Is my Gen1 dataflow ready to upgrade to Gen2.1?"upgradereferences/upgrade.md

Files

references/authoring/connectors.md

Source Connectors in Dataflow Gen2 Mashup (M)

The source-side companion to connection-management.md (REST connection lifecycle) and output-destinations.md (destination-side M). Documents which Power Query M source connectors are reachable from the Fabric Dataflow Gen2 mashup engine, their argument shapes, navigation patterns, and runtime errors. All claims confirmed by executeQuery probing — the in-band-error contract (HTTP 200 with {"Error":...} in the PQ Arrow Metadata column) is documented at mashup-preview.md § Error handling.

Connector vs binding vs M function

LayerWhat it isWhere it lives
Connection resourceFabric-managed credentials + parameters/v1/connections/{id} — see connection-management.md § Step 2
Dataflow bindingconnections[] entry in queryMetadata.json tying one connection to a dataflowDataflow definition — see authoring-cli-quickref.md § Connection Binding Quick Patterns
M function callSource expression in mashup.pq — Sql.Database(...), Lakehouse.Contents(...)mashup.pq

The function and the binding must agree on kind; REST casing differs from M (REST "SQL" ↔ M Sql.Database) — see connection-management.md § Connection Type Examples and § Step 1.

Function inventory

All functions below have their symbol registered in the Fabric mashup engine (Value.Type(<function>) returns [Type]). Runtime behaviour is split into the next three sections.

FunctionBehaviour
Lakehouse.Contents✅ Fully executes against a bound Lakehouse connection — see Lakehouse navigation
Sql.Database🔑 Needs SQL binding — see Credentialed connectors
Fabric.Warehouse🔑 Needs Warehouse binding
OData.Feed🔑 Needs OData binding
Web.Contents🔑 Needs Web binding
PowerPlatform.Dataflows🔑 Needs PowerPlatformDataflows binding (singleton) — see PowerPlatform.Dataflows navigation
Snowflake.Databases, AzureStorage.DataLake, Excel.Workbook🔑 Symbol present; not exercised end-to-end here
Html.Table, Csv.Document, Json.Document, Lines.FromBinary, #table✅ Pure parsers — no binding — see Pure-data parsers
Variable.Value🔑 Symbol present; requires a Variable Library on the dataflow — see Variable.Value
Web.Page, Web.BrowserContentsGateway-backed in cloud dataflows; disabled in the direct executeQuery runtime tested here - see Browser functions and gateway scope

Full enumeration at runtime via #shared.

Browser functions and gateway scope

Microsoft Learn documents Web.Page and Web.BrowserContents as available in cloud dataflows through an on-premises data gateway. See Using a gateway with the Web connector.

The direct, gateway-free executeQuery runtime probed for this skill returned the following errors, even for inline literals:

FunctionVerbatim engine error
Web.BrowserContentsThe module named 'WebBrowserContents' has been disabled in this context.
Web.PageThe module named 'Html' has been disabled in this context.

For gateway-free authoring and preview, use Web.Contents plus Html.Table. If browser rendering is required, use a gateway-backed Web connection and validate through the supported cloud-dataflow path rather than direct executeQuery.

Lakehouse navigation

Canonical call:

Lakehouse.Contents()

Lakehouse.Contents(null) and Lakehouse.Contents([HierarchicalNavigation = null, CreateNavigationProperties = false, EnableFolding = false]) return the same navigation root. The options-record form is the form used by output-destinations.md § Destination Type: Lakehouse; not required for reads.

Navigation shape

Root — workspaces visible to the bound connection (columns: workspaceId, workspaceName, Data, plus navigation hints ItemKind, ItemName, IsLeaf):

ColumnUse
workspaceId (string)Index by GUID: {[workspaceId="..."]}
workspaceName (string)Index by display name (fragile if duplicates)
Data (table)Drilldown into that workspace

Inside a workspace — one row per Lakehouse / SQL endpoint, columns: lakehouseId, lakehouseName, description, capacityObjectId, extendedProperties, Data, databaseId, ItemKind, ItemName, IsLeaf.

ColumnUse
lakehouseId (string)Index by GUID: {[lakehouseId="..."]}
Data (table)Drilldown into the lakehouse contents

Inside a lakehouse — mixed contents, not a flat list of tables. Columns: Name, Id, Data, Schema, ItemKind, ItemName, IsLeaf. Rows include ItemKind = "Table" (user tables, Schema = "dbo"), ItemKind = "View" (built-in views in schemas sys and queryinsights), and a single ItemKind = "Folder" row with Name = "Files" for OneLake file access.

PatternUse
{[Name="MyTable"]}[Data]Read a specific table or view by name
{[Id="Files"]}[Data]Drill into the Files folder (returns Folder.Contents-style rows: Content, Name, Extension, Folder Path, Date modified, …)
Table.SelectRows(Lh, each [ItemKind] = "Table")Filter to only user tables
End-to-end read
section Section1;

shared MyTable = let
    Source = Lakehouse.Contents(),
    Workspace = Source{[workspaceId = "<workspace-guid>"]}[Data],
    Lakehouse = Workspace{[lakehouseId = "<lakehouse-guid>"]}[Data],
    Table = Lakehouse{[Name = "Products"]}[Data]
in
    Table;

Anti-pattern. …{[lakehouseId=...]}[Data]{[Id="Tables"]}[Data] is wrong — there is no Tables folder entry; tables are listed directly at the lakehouse-[Data] level. The engine returns "The key didn't match any rows in the table." ({[Id="Files"]}[Data] is valid — it's the one folder entry that exists.)

PowerPlatform.Dataflows navigation

Read the output of another Dataflow Gen2 with the PowerPlatform.Dataflows connector. The argument is required — call PowerPlatform.Dataflows(null); the no-arg form PowerPlatform.Dataflows() is a compile error. The result is a nav table you drill by index, the same shape pattern as Lakehouse navigation.

Navigation shape
StepExpressionReturns
RootPowerPlatform.Dataflows(null)Nav table whose first drill key is the literal Workspaces entry
Workspaces{[Id = "Workspaces"]}[Data]One row per workspace (workspaceId, Name, Data)
A workspace{[workspaceId = "<guid>"]}[Data]One row per dataflow in that workspace (dataflowId, dataflowName, Data)
A dataflow{[dataflowName = "<name>"]}[Data]The dataflow's output table(s)

Pass the workspace id through a Variable Library rather than hardcoding a GUID literal — see Variable.Value.

End-to-end read
section Section1;

shared UpstreamDataflow = let
    Source     = PowerPlatform.Dataflows(null),
    Workspaces = Source{[Id = "Workspaces"]}[Data],
    Workspace  = Workspaces{[workspaceId = Variable.Value("currentWorkspaceId")]}[Data],
    Dataflow   = Workspace{[dataflowName = "eval_authoring_basic"]}[Data]
in
    Dataflow;

Note. The first drill is the literal {[Id = "Workspaces"]}[Data] entry, not a workspaceId index — workspaceId selection happens at the next level down. The (null) argument is mandatory.

Credentialed connectors

Without a matching dataflow binding, each function below returns the in-band error "Credentials are required to connect to the <kind> source. (Source at <source>.)" — the credential error itself confirms parsing and arity validation succeeded.

FunctionSignatureVerbatim credential error (no binding)
Sql.Database(server, database, [options])2 or 3 args; 1-arg form rejected with 1 arguments were passed to a function which expects between 2 and 3.Credentials are required to connect to the SQL source. (Source at <server>;<database>.)
Fabric.Warehouse([options]) / Fabric.Warehouse(null)Options record or nullCredentials are required to connect to the Warehouse source. (Source at Warehouse.)
OData.Feed(url, [headers], [options])1–3 argsCredentials are required to connect to the OData source. (Source at <url>.)
Web.Contents(url, [options])1–2 args; returns binaryCredentials are required to connect to the Web source. (Source at <url>.)
PowerPlatform.Dataflows(null)Singleton; takes nullCredentials are required to connect to the PowerPlatformDataflows source. (Source at PowerPlatformDataflows.)

To enable any of these, bind a matching-kind connection per authoring-cli-quickref.md § Connection Binding Quick Patterns. For multi-source documents add [AllowCombine = true].

Pure-data parsers

These transform in-memory values and require no binding — safe primitives for tests and for parsing payloads pulled by a credentialed connector.

Html.Table(html, columnNameSelectorPairs, [options])
Html.Table(Web.Contents("https://example.com/page"),
    {{"Name", ".product-name"}, {"Price", ".product-price"}},
    [RowSelector = ".product-row"])
  • Observed engine behavior: in live Dataflow Gen2 refresh, supplying a RowSelector is needed whenever more than one {columnName, cssSelector} pair is given. Microsoft Learn documents the options record — including RowSelector — as optional and does not state this rule; treat it as behavior this skill verified live. Use RowSelector to group the repeating rows.

  • Works on tables defined by any repeating CSS pattern, not just <table>.

Csv.Document(binary, [options])
Csv.Document(Web.Contents("https://example.com/data.csv"),
    [Delimiter = ",", Encoding = 65001, QuoteStyle = QuoteStyle.Csv])

Both QuoteStyle.Csv and QuoteStyle.None accepted; optional Columns = <n> to fix arity.

Json.Document(text-or-binary, [encoding])
Json.Document("{""x"": 42}")
Json.Document(Text.ToBinary("{""x"":42}", 65001), 65001)
Lines.FromBinary, #table
Lines.FromBinary(Web.Contents("https://example.com/log.txt"))
#table(type table [Id = Int64.Type, Name = text], {{1, "A"}, {2, "B"}})

Lines.FromBinary streams a binary as a list of lines; #table is the standard inline-table constructor.

#shared

#shared is the global record of every loaded function and identifier. Enumerate connectors at runtime:

let
    Source = #shared,
    AsTable = Record.ToTable(Source),
    SqlFunctions = Table.SelectRows(AsTable, each Text.StartsWith([Name], "Sql."))
in
    SqlFunctions

Returns columns Name and Value (function/type/table/record).

Variable.Value

Variable.Value("<name>") reads a named variable from the dataflow's Variable Library. If the variable does not exist the engine returns "The variable '<name>' could not be found.".

section Section1;
shared CurrentWorkspaceId = Variable.Value("currentWorkspaceId");

Reading a variable value requires a Variable Library configured on the dataflow.

[AllowCombine = true]

For documents that combine more than one credentialed source, prepend the section attribute on the first non-comment line:

[AllowCombine = true]
section Section1;

shared Q = ...;

Without it the privacy firewall blocks evaluation when two or more sources are referenced — see connection-management.md § Operational Pitfalls.

MUST / PREFER / AVOID

MUST
  1. Match the M function kind to the binding kind. REST casing differs (REST "SQL" ↔ M Sql.Database) — see connection-management.md § Step 1.

  2. Use Html.Table for gateway-free HTML parsing. Web.Page and Web.BrowserContents require an on-premises gateway in cloud dataflows and are disabled in the direct executeQuery runtime tested here.

  3. For combined-source documents, add [AllowCombine = true] before section Section1;.

  4. Decode the Arrow stream and inspect PQ Arrow Metadata when reading executeQuery results — 200 OK is not success.

PREFER
  1. Index by GUID (workspaceId, lakehouseId) over display name for Lakehouse navigation.

  2. Pure parsers (Csv.Document, Json.Document, Html.Table) for in-memory data — no binding required.

  3. The verified Lakehouse navigation shape (workspaceId → lakehouseId → Name) over folder-style {[Id="Tables"]}.

AVOID
  1. Web.BrowserContents in direct executeQuery - use a gateway-backed Web connection when browser rendering is required.

  2. Web.Page in direct executeQuery - use a gateway-backed Web connection when the legacy browser function is required.

  3. Sql.Database("server") (1-arg form) — engine rejects with arity error. Always supply the database name.

  4. {[Id="Tables"]} at the lakehouse-[Data] level — there is no Tables folder; tables are listed directly. ({[Id="Files"]} IS valid — it's the only folder entry.)

See also

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs Python

Security

What our scanner noticed· Low risk

  • Instructions that use the network
  • Scripts that your agent may run

This skill includes scripts that your agent may run. Read them before you use it.

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Microsoft
Publisher
Microsoft (Official)
Source
microsoft/skills-for-fabric · skills/dataflows-cli · commit f8fac11
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced
Also distributed in
microsoft/skills-for-fabric

AutoGineer is not affiliated with or endorsed by Microsoft or Microsoft.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download dataflows-cli.zip