---
title: "Change many rows with SQL"
description: "Runs one UPDATE or DELETE as you."
canonical: "https://grid82.com/docs/app-api/sql/execute"
updated: "2026-11-13"
---

# Change many rows with SQL

`POST https://your-suite.grid82.app/your-app/v1/sql/execute`

Runs one UPDATE or DELETE as you.

> **Note: Generic contract**
>
> Your own version of this operation, with your tables and the fields you can read, is in
> your app's document: `https://{suite}.grid82.app/{app}/v1/openapi.json`, behind your credential.
> [Why each person gets their own](/docs/start/studio-and-runtime#why-an-app-has-an-api-of-its-own).

The statement names the rows and the new values; each row is then written through the same checks as a single edit, so a row you may not change is skipped. The whole statement is one changeset, returned as changesetId, so one revert undoes it. Up to 500 rows per statement. Without a WHERE it refuses unless confirm is true; dryRun counts first. The dialect: SELECT \<columns or aggregates> FROM \<table> \[WHERE …] \[GROUP BY …] \[ORDER BY …] \[LIMIT n OFFSET m]; UPDATE \<table> SET col = expr \[WHERE …]; DELETE FROM \<table> \[WHERE …]. One table per statement; field names or ids (double-quote names with spaces); 'text', numbers, TRUE, FALSE, NULL, CURRENT\_DATE; AND OR NOT, = \<> \< \<= > >=, \[NOT] LIKE, \[NOT] IN (…), IS \[NOT] NULL, \[NOT] BETWEEN, CASE WHEN cond THEN v … \[ELSE v] END and CASE expr WHEN value THEN v … \[ELSE v] END; a select takes its choice's label (any case) or id; functions LENGTH LOWER UPPER TRIM ABS ROUND COALESCE SUBSTR DATE STRFTIME IFNULL INSTR REPLACE; link columns: col HAS ANY ('id', …), col HAS ALL (…), col IS EMPTY. Your text is never executed: it is compiled against your own permissions, and a column you may not read is simply an unknown column.

Requires the `records:write` scope. Operation `sql.execute`. MCP tool `sql_execute`. CLI: `grid82 sql execute` (`npx grid82`).

## Headers

| Name              | Type   | Required | Description                                                                                                                                                                                                                                                        |
| ----------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `Idempotency-Key` | string | no       | Any unique string. Sending the same key with the same request again returns the first response (marked `Idempotency-Replayed: true`) instead of running it twice. Reusing it for a different request is refused with 409. Kept for 24 hours. Up to 255 characters. |

## Request body

| Field     | Type    | Required | Description             |
| --------- | ------- | -------- | ----------------------- |
| `sql`     | string  | yes      | Up to 20000 characters. |
| `confirm` | boolean | no       |                         |
| `dryRun`  | boolean | no       |                         |

**Authorizations**

- `Authorization` (bearer, in header, required)

## Response

**200**: Success

- `data` (`object`, required)
- `data.kind` (`enum<string>`, required, one of: `update, delete`)
- `data.affected` (`integer`, required)
- `data.ids` (`string[]`, required)
- `data.failures` (`string[]`)
- `data.warnings` (`object[]`)
- `data.warnings.code` (`string`, required)
- `data.warnings.recordId` (`string`, required)
- `data.warnings.fieldId` (`string`, required)
- `data.warnings.fieldName` (`string`, required)
- `data.warnings.message` (`string`, required)
- `data.dryRun` (`boolean`, required)
- `data.changesetId` (`string`)

```json
{
  "data": {
    "kind": "update",
    "affected": 123,
    "ids": [
      "<string>"
    ],
    "failures": [
      "<string>"
    ],
    "warnings": [
      {
        "code": "<string>",
        "recordId": "<string>",
        "fieldId": "<string>",
        "fieldName": "<string>",
        "message": "<string>"
      }
    ],
    "dryRun": true,
    "changesetId": "<string>"
  }
}
```

**4XX**: Refused

- `error` (`object`, required)
- `error.code` (`enum<string>`, required, one of: `not_found, forbidden, unauthenticated, validation_failed, conflict, rate_limited, payment_required, not_implemented, internal`)
- `error.message` (`string`, required)
- `error.details` (`Record<string, unknown>`)

```json
{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}
```

**Example request**

```bash
curl --request POST \
  --url 'https://your-suite.grid82.app/your-app/v1/sql/execute' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "sql": "<string>"
}'
```