DuckDB 2.0 LTS: Client-Server Mode, Agent Mode, One-Way Files
DuckDB 2.0 LTS adds the Quack client-server protocol, an AI agent mode and triggers. Files written by 2.0 can't be read by 1.x. Upgrade in the right order.
DuckDB 2.0 is out, and the embedded database now has a server. The DuckDB team announced version 2.0.0 LTS, "Cinnamon Teal," on October 21: a client-server protocol called Quack, an agent mode for AI tools that drive the CLI, triggers, and a new SQL parser. It is a long-term support release. It also writes database files that DuckDB 1.x cannot open. If DuckDB sits anywhere in your reporting stack, the upgrade order matters more than the feature list.
What actually happened
Per the official announcement, built from close to 20,000 commits since 1.5:
- Quack client-server protocol. Any DuckDB process can now serve its databases. The
quackextension addsquack_serve(token = ...), clients attach withATTACH 'quack:...', and the CLI gets-serveand-connectflags. It listens on localhost by default. For remote access, DuckDB says to put a TLS-terminating reverse proxy in front. - CONNECT for other databases. The same
CONNECTstatement works against PostgreSQL and MySQL, with a remote pushdown optimizer. - Agent mode. The CLI detects when an AI agent runs it. It then prints compact Markdown tables, says when results are truncated, stops runaway queries early, returns errors as JSON, and reports the expected cost of long queries before running them. In DuckDB's TPC-H tests it cut the output the model had to read by 59%. Toggle it with
-agentor-no-agent. - Async I/O and VARIANT. Parquet, CSV and native reads run in the background with multiple requests in flight, which helps
s3://workloads. A new VARIANT type stores JSON-like data in columnar form. - Triggers.
CREATE TRIGGERwith BEFORE and AFTER timing and row or statement granularity, with some combinations not yet supported. - Support window. 2.0 is supported until at least October 2027. 1.4 support ends November 17, 2026. 1.5 is extended to March 2027.
Why it matters for your business
DuckDB is the quiet engine behind a lot of small-business analytics: a Parquet export from Shopify, a nightly sales rollup, a notebook someone on the team owns. 2.0 changes three things for that setup.
The file format is one-way. DuckDB 2.0 reads and writes your existing files, and those stay readable by older versions. But a database file created by 2.0 cannot be opened by anything before 2.0. If one laptop upgrades and writes a new shared file, every 1.x script that reads it breaks. Upgrade readers first, writers last. DuckDB's own advice is to test on a shadow system.
Agent mode is the right default. A model reading padded ASCII boxes wastes tokens, and a model that fires an unbounded query on a large table wastes money. Cost estimates before a long query and early stops are the controls we want on any agent that touches data.
Quack is not a public endpoint. Localhost and a token by default is correct. Keep it that way, or put it behind a proxy you control.
Key takeaways
- DuckDB 2.0.0 LTS shipped October 21, supported until at least October 2027
- Quack lets DuckDB serve databases, localhost-only by default
- Agent mode gives AI tools compact output, JSON errors and query cost estimates
- Files created by 2.0 can't be read by 1.x: upgrade readers before writers
- DuckDB 1.4 support ends November 17, 2026
Want reporting an AI agent can query without burning your budget? We build analytics pipelines on open formats like DuckDB and Parquet, with agent access scoped and capped from day one, and you own every file. See how we build data systems, or tell us what your reporting looks like today.
Sources: DuckDB.
- #duckdb
- #analytics
- #sql
- #ai-agents
- #database
Tommy Rush — Founder, Rush Commerce
Operator turned builder. 15+ years running operations — now shipping the systems businesses run on. More
Get The Rush Report weekly — one email, zero fluff.
Keep reading
Plex2Shell: update Plex Media Server, then check for miners
Plex2Shell chains four Plex Media Server flaws into remote code execution. CISA lists it as exploited. Update to 1.43.3.10861 and check the box for implants.
Read itKimi K3.1 Pro: open weights Nov 4, read the whole table
Moonshot's Kimi K3.1 Pro beats GPT-6 Astra on Terminal-Bench but trails Claude Opus 5.5. Open weights land by Nov 4. What to test before you switch.
Read it