Your account
Log in to Tablemere.
Your catalogs, tokens, members and usage, and a SQL explorer that runs DuckDB inside this browser tab with credentials scoped to your catalog. Your data never passes through our website.
Nothing is stored beyond this tab: the session ends when you close it or log out.
I have an API key (agents and debugging)
API address
Welcome
Set your password.
You are finishing the setup of your Tablemere account.
The link in the mail is valid for three days and works once. Expired? Sign up again with the same address, or ask for a reset link.
Password reset
Choose a new password.
Every session of yours is signed out when it is set. Tokens your agents hold are not affected.
The link is valid for 30 minutes and works once. Expired? Ask for another.
Forgot your password
Reset it by email.
Enter the address of your account. If it has one, a link to choose a new password is on its way; it is valid for 30 minutes.
Check your email.
If has a Tablemere account, a mail from no-reply@tablemere.eu with the reset link is on its way. The link is valid for 30 minutes and works once.
Nothing arrives within a minute? Check the spam folder, then the spelling of the address; a new link can be requested once a minute. An account that logs in through an external identity provider has no password here and gets no mail.
Connect an agent
Connect this agent to your catalog?
An agent ran tablemere login on a machine and is waiting. Approving creates an agent of your organisation, named after that machine, with exactly the access you choose below; its key goes to that machine only and never through the conversation. You can revoke it at any time from Connections on your account page.
First login
Name your organisation.
You are signed in, but this identity belongs to no organisation yet. Catalogs, tokens and members live in one; you will be its first admin.
Catalogs
An Iceberg catalog organises your tables and connects them to your tools. Tablemere includes managed storage and table maintenance. Your agent or query engine runs the analysis. Your level on a catalog decides what the credentials the API hands you can do: write or read.
Loading…
Create a catalog
Select a catalog on the left for its details, grants, tables and the danger zone.
Pick a table on the left for its schema, row count and snapshots.
This panel refuses statements other than SELECT, WITH, SHOW, DESCRIBE, EXPLAIN as a courtesy against accidents; it is not a permission. The credential is the boundary: via catalog, DuckDB holds the credential the API vends for your level on the catalog; in Direct mode, a credential scoped to one table's prefix. Writes go through your engine (DuckDB, PyIceberg, Spark) with the connection recipe. A query without a LIMIT gets one.
Connections
Machines connected with tablemere login and approved by a person here. Each connection is an agent of the organisation named after the machine, holding exactly the access approved; its key lives on that machine only. Revoking stops it at once.
Loading…
Tokens
A token is a machine identity of the organisation (the CLI calls it an agent): its own API key, shown once, with read or write on the catalogs you choose and nothing else. Revoking it stops it at once. A token's grants can never exceed those of the person creating it.
Loading…
Create a token
Members
Two roles: admin (everything, including inviting, removing and deleting catalogs) and member (read on every catalog, write on the ones they create or are granted). The last admin cannot leave or be demoted.
Loading…
Invite
Usage
The free plan meters one thing: bytes stored, summed over the organisation, measured hourly by maintenance. Over the limit, creating catalogs or tables and vending write credentials answer 409 quota_exceeded until space is freed; reading keeps working.
Loading…
You
Organisation
Loading…
Domains
Claim your email domain to let colleagues with a verified address there join by themselves (switch it on below). Public mail domains cannot be claimed; the proof is your own verified address on the domain.
Terms
Loading…
Change password
At least 12 characters. Every other session of yours is signed out when it changes; this one stays.
Sessions
Every browser tab logged in as you. Revoking one signs it out at its next request; the refresh token behind it stops working at once.
Loading…
Your API keys
Keys minted for you as a person (the CLI's tablemere login does this). Prefer tokens for anything automated: they are scoped and revocable on their own. Revoking the key you signed in with signs you out.
Cancel account
Deletes your account now: every API key of yours revoked, your identity unlinked, your memberships removed. An organisation left without members has its catalogs purged within 30 days. If you are the only admin of an organisation with other members, make someone else an admin first. This cannot be undone.