MCP Superset

137 tools. 74 can modify or destroy data without limits.

18 destructive tools with no built-in limits. Policy required.

Last updated:

74 can modify or destroy data
63 read-only
137 tools total

Community server · catalogue entry verified 11/06/2026

How to control MCP Superset ↓

What MCP Superset exposes to your agents

Read (63) Write / Execute (56) Destructive / Financial (18)
Critical Risk

The most dangerous MCP Superset tools

74 of MCP Superset's 137 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control MCP Superset

PolicyLayer is an MCP gateway — it sits between your AI agents and MCP Superset, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "superset_annotation_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "superset_dashboard_filter_reset": {
    "limits": [
      {
        "counter": "superset_dashboard_filter_reset_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "superset_annotation_get": {
    "limits": [
      {
        "counter": "superset_annotation_get_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register MCP Superset — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON MCP SUPERSET →

Free to start. No card required.

All 137 MCP Superset tools

WRITE 49 tools
Write superset_dashboard_filter_reset superset_dashboard_filter_reset Write superset_dashboard_unpublish Unpublish a dashboard (convert to draft). Write superset_group_remove_users Remove users from a group without removing the rest. Write superset_dashboard_grant_role_access superset_dashboard_grant_role_access Write superset_dataset_duplicate superset_dataset_duplicate Write superset_dataset_get_or_create superset_dataset_get_or_create Write superset_saved_query_create superset_saved_query_create Write superset_saved_query_update Update a saved query. Pass only the fields to change. Write superset_annotation_create superset_annotation_create Write superset_annotation_layer_create Create a new annotation layer. Write superset_annotation_layer_update Update an annotation layer. Pass only the fields to change. Write superset_annotation_update superset_annotation_update Write superset_assets_import superset_assets_import Write superset_bulk_user_role_add superset_bulk_user_role_add Write superset_bulk_user_role_replace superset_bulk_user_role_replace Write superset_chart_copy superset_chart_copy Write superset_chart_create superset_chart_create Write superset_chart_import superset_chart_import Write superset_chart_update superset_chart_update Write superset_dashboard_copy superset_dashboard_copy Write superset_dashboard_create superset_dashboard_create Write superset_dashboard_embedded_set superset_dashboard_embedded_set Write superset_dashboard_filter_add superset_dashboard_filter_add Write superset_dashboard_filter_update superset_dashboard_filter_update Write superset_dashboard_import superset_dashboard_import Write superset_dashboard_publish Publish a dashboard (make it visible to users with appropriate permissions). Write superset_dashboard_update superset_dashboard_update Write superset_database_create superset_database_create Write superset_database_update superset_database_update Write superset_dataset_create superset_dataset_create Write superset_dataset_import Import datasets from a ZIP file (created via export). Write superset_dataset_update superset_dataset_update Write superset_group_add_roles Add roles to a group without removing existing ones. Write superset_group_add_users Add users to a group without removing existing ones. Write superset_group_create superset_group_create Write superset_group_update superset_group_update Write superset_report_create superset_report_create Write superset_report_update superset_report_update Write superset_rls_create superset_rls_create Write superset_rls_update superset_rls_update Write superset_role_copy_permissions Copy all permissions from one role to another (full replacement). Write superset_role_create Create a new role (without permissions). Permissions are added via role_permission_add. Write superset_role_permission_add superset_role_permission_add Write superset_role_update Rename a role. Write superset_tag_bulk_create superset_tag_bulk_create Write superset_tag_create superset_tag_create Write superset_tag_update superset_tag_update Write superset_user_create superset_user_create Write superset_user_update superset_user_update
READ 63 tools
Read superset_annotation_get Get an annotation by ID. Read superset_annotation_layer_get Get annotation layer information by ID. Read superset_annotation_layer_list superset_annotation_layer_list Read superset_annotation_list superset_annotation_list Read superset_chart_data superset_chart_data Read superset_chart_get Get detailed information about a chart by ID. Read superset_chart_get_data superset_chart_get_data Read superset_chart_list superset_chart_list Read superset_dashboard_charts Get the list of all charts placed on a dashboard. Read superset_dashboard_datasets Get the list of all datasets used by a dashboard's charts. Read superset_dashboard_embedded_get Get the embedding (embedded) settings of a dashboard. Read superset_dashboard_filter_list Get a list of native filters on a dashboard in a readable format. Read superset_dashboard_get superset_dashboard_get Read superset_dashboard_list superset_dashboard_list Read superset_database_available_engines List supported database engine types for creating connections. Read superset_database_catalogs List catalogs in a database (for engines that support catalogs). Read superset_database_connection_info Get connection information (URI without password, parameters). Read superset_database_function_names List available SQL functions in the database. Read superset_database_get Get detailed information about a database connection by ID. Read superset_database_list superset_database_list Read superset_database_related_objects Get objects related to a database connection (datasets, charts). Read superset_database_schemas List schemas available in a database. Read superset_database_table_metadata superset_database_table_metadata Read superset_database_tables superset_database_tables Read superset_dataset_get Get detailed information about a dataset: columns, metrics, SQL. Read superset_dataset_list superset_dataset_list Read superset_dataset_related_objects Get objects related to a dataset (charts and dashboards). Read superset_get_base_url Get the base URL of the configured Superset instance. Read superset_get_current_user Get information about the current authenticated user (mcp_service). Read superset_get_current_user_roles Get the list of roles for the current user (mcp_service). Read superset_get_menu Get the Superset navigation menu structure. Read superset_group_get Get detailed information about a group by ID. Read superset_group_list superset_group_list Read superset_log_list superset_log_list Read superset_permission_list superset_permission_list Read superset_permissions_audit superset_permissions_audit Read superset_query_get Retrieve detailed information about a query from the history by ID. Read superset_query_list superset_query_list Read superset_recent_activity Get recent activity of the current user (views, edits). Read superset_report_get Get detailed information about a report/alert by ID. Read superset_report_list superset_report_list Read superset_rls_get Get detailed information about an RLS rule by ID. Read superset_rls_list superset_rls_list Read superset_role_get Get role information by ID. Read superset_role_list superset_role_list Read superset_role_permissions_get Get the current list of permissions for a role. Read superset_saved_query_get Retrieve a saved query by ID: SQL text, schema, description. Read superset_saved_query_list superset_saved_query_list Read superset_sqllab_estimate_cost Estimate the cost of executing a SQL query (EXPLAIN). Read superset_sqllab_format_sql Format a SQL query (pretty print with indentation). Read superset_sqllab_results superset_sqllab_results Read superset_tag_get Get tag information by ID. Read superset_tag_get_objects superset_tag_get_objects Read superset_tag_list superset_tag_list Read superset_user_get Get detailed information about a user by ID. Read superset_user_list superset_user_list Read superset_assets_export superset_assets_export Read superset_chart_export superset_chart_export Read superset_dashboard_export superset_dashboard_export Read superset_database_export superset_database_export Read superset_database_select_star superset_database_select_star Read superset_dataset_export superset_dataset_export Read superset_sqllab_export_csv Export query results to CSV format.

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about MCP Superset

Can an AI agent delete data through the MCP Superset MCP server? +

Yes. The MCP Superset server exposes 18 destructive tools including superset_annotation_delete, superset_annotation_layer_delete, superset_bulk_user_role_remove. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through MCP Superset? +

The MCP Superset server has 49 write tools including superset_dashboard_filter_reset, superset_dashboard_unpublish, superset_group_remove_users. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach MCP Superset.

How many tools does the MCP Superset MCP server expose? +

137 tools across 4 categories: Destructive, Execute, Read, Write. 63 are read-only. 74 can modify, create, or delete data.

How do I enforce a policy on MCP Superset? +

Register the MCP Superset MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every MCP Superset tool call.

Deterministic rules across all 137 MCP Superset tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

137 MCP Superset tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.