// SCAN REPORT

Metabase MCP Server

87 tools. 46 can modify or destroy data without limits.

10 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

46 can modify or destroy data

41 read-only

87 tools total

Community server · catalogue entry verified 03/07/2026

How to control Metabase MCP Server ↓

TOOL MAP

What Metabase MCP Server exposes to your agents

Read (41) Write / Execute (36) Destructive / Financial (10)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Metabase MCP Server tools

Destructive · Medium delete_card_public_link The tool permanently deletes a public link/URL for a Metabase card. Destructive · Medium delete_public_link This tool irreversibly removes public link access for a dashboard. Destructive · High delete_card This tool irreversibly deletes data (Metabase cards/queries) from the analytics platform. Destructive · High delete_collection This tool permanently and irreversibly deletes a Metabase collection along with all its contained dashboards, cards, and other content.

46 of Metabase MCP Server's 87 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Metabase MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Metabase MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_card": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_card_to_dashboard": {
    "limits": [
      {
        "counter": "add_card_to_dashboard_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "audit_dashboard_filters": {
    "limits": [
      {
        "counter": "audit_dashboard_filters_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Metabase MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON METABASE →

Instant setup, no code required.

FULL CATALOGUE

All 87 Metabase MCP Server tools

DESTRUCTIVE 10 tools

Destructive delete_card Remove a Metabase card either by archiving (soft delete, preserves history) or permanent deletion - use this t Destructive delete_card_public_link Remove public access to a Metabase card by deleting its public URL (requires admin privileges) - use this to r Destructive delete_collection Permanently delete a Metabase collection - use with caution as this affects contained content and cannot be un Destructive delete_dashboard Delete or archive a dashboard (soft or hard delete) - use with caution as permanent deletion cannot be undone Destructive delete_database Permanently remove a database from Metabase - use with caution as this will break dependent content and cannot Destructive delete_public_link Remove public URL access for a dashboard (requires superuser) - use this to revoke external access for securit Destructive discard_table_field_values Clear cached field values to force fresh data loading - use this when table data has changed or cached values Destructive remove_cards_from_dashboard Remove specific dashcards from a dashboard by their dashcard IDs (not card_id) - use this to clean up dashboar Destructive replace_table_csv Completely replace table data with new CSV content - use this for full data refreshes, model updates, or compl Destructive update_dashboard_cards ⚠️ DANGER: REPLACES ALL dashboard cards - any cards not in the array will be DELETED. To update a single card,

EXECUTE 6 tools

Execute execute_card Run a Metabase card query and return the actual data results - use this to get current data from existing card Execute execute_dashboard_card Execute a specific card from a dashboard and retrieve fresh data - use this to get current results from dashbo Execute execute_pivot_card_query Run a Metabase card with pivot table formatting to cross-tabulate data with rows and columns - use this to cre Execute execute_query Execute a native SQL query against a Metabase database - use this for custom data analysis, complex queries, o Execute rescan_table_field_values Trigger rescan to refresh field values cache with current data - use this to update dropdown options, statisti Execute sync_database_schema Initiate schema sync to update Metabase metadata cache - use this after database changes to recognize new tabl

WRITE 30 tools

Write add_card_to_dashboard Add an existing card to a dashboard with optional parameter mappings - use this to build comprehensive dashboa Write add_sample_database Add the built-in Metabase sample database with demo data - use this for testing, learning, or exploring Metaba Write add_text_block Add a text block or heading to a dashboard - use this for explanatory text, titles, or instructions Write append_csv_to_table Add new rows from CSV content to existing table - use this for incremental data loading, updates, or importing Write copy_card Create a duplicate copy of an existing Metabase card with identical query and settings - use this to create va Write copy_dashboard Create a copy of an existing dashboard with all cards and layout - use this to create templates, backups, or v Write create_card Create a new Metabase card with custom query, visualization type, and settings - use this to programmatically Write create_card_public_link Generate a publicly accessible URL for a Metabase card that can be viewed without authentication (requires adm Write create_collection Create a new Metabase collection for organizing analytical content - use this to establish organizational cont Write create_dashboard Create a new Metabase dashboard - use this to build new analytical views, organize related cards, or establish Write create_database Add a new database connection to Metabase - use this to connect new data sources, establish analytical pipelin Write create_public_link Generate publicly accessible URL for a dashboard (requires superuser) - use this for external reporting, clien Write export_card_result Execute a Metabase card and export the results in a specific format (CSV, Excel, JSON, etc.) - use this to dow Write favorite_dashboard Mark a dashboard as favorite for quick access - use this to bookmark frequently accessed analytical views Write move_cards Relocate multiple Metabase cards to a different collection or dashboard for better organization - use this to Write move_cards_to_collection Bulk transfer multiple Metabase cards to a specific collection for organizational purposes - use this to categ Write move_to_collection Move a Metabase card or dashboard to a different collection - use this to reorganize content, implement govern Write reorder_table_fields Change display order of table fields for better organization - use this to arrange fields logically, group col Write revert_dashboard Restore a dashboard to a specific previous revision - use this to undo changes, restore deleted content, or re Write save_dashboard Save a complete dashboard object with nested data - use this for bulk operations or complex dashboard structur Write save_dashboard_to_collection Save a dashboard object directly into a specific collection - use this for organized dashboard creation or bul Write sync_table_schema Initiate schema sync for specific table to update metadata - use this when table structure has changed and nee Write unfavorite_dashboard Remove a dashboard from the user Write update_card Modify an existing Metabase card Write update_collection Update collection properties including name, description, and organization - use this to maintain metadata, re Write update_dashboard Update dashboard properties including name, description, parameters, and settings - use this to maintain metad Write update_dashcard Update a specific dashcard Write update_database Update database configuration including name, connection details, and sync settings - use this to maintain con Write update_table Update table configuration including display name, description, and field settings - use this to customize pre Write update_tables Bulk update multiple Metabase tables with same configuration - use this to apply consistent settings, update m

READ 41 tools

Read audit_dashboard_filters Analyze dashboard filter connections to find unconnected or misconfigured cards - use this to diagnose filter Read check_database_health Perform health check on database connection - use this to diagnose issues, monitor status, or troubleshoot syn Read get_card Get complete metadata and configuration for a specific Metabase card including query definition, visualization Read get_card_dashboards Find all dashboards that include a specific Metabase card - use this to understand where a card is being used, Read get_card_param_remapping Retrieve how parameter values are remapped or transformed for display in a Metabase card - use this to underst Read get_card_param_values Retrieve all available values for a specific parameter in a Metabase card - use this to populate dropdown filt Read get_card_query_metadata Retrieve structural metadata about a Metabase card Read get_card_series Retrieve time series data or related card suggestions for a Metabase card - use this to get chronological data Read get_card_table_fks Retrieve foreign keys for a card Read get_card_table_query_metadata Retrieve query metadata for a card Read get_collection_items Retrieve all items (cards, dashboards) within a Metabase collection - use this to explore collection contents, Read get_dashboard Retrieve detailed information about a specific Metabase dashboard including cards, layout, and settings - use Read get_dashboard_cards Retrieve all cards within a specific Metabase dashboard - use this to analyze dashboard content, understand da Read get_dashboard_queries Extract all queries from a dashboard with IDs resolved to actual table/column names - use this to understand d Read get_dashboard_related Retrieve entities related to a Metabase dashboard - use this to discover related content, find similar analyti Read get_dashboard_revisions Retrieve revision history for a Metabase dashboard - use this to track dashboard evolution, review past change Read get_database Retrieve detailed information about a specific Metabase database including connection details and schema - use Read get_database_metadata Retrieve comprehensive database metadata including tables, fields, and relationships - use this to understand Read get_database_schema Retrieve detailed information about a specific schema including tables and objects - use this to explore schem Read get_field_id Look up a field Read get_metabase_playground_link Generate a Metabase playground link for interactive query exploration - allows users to see results and experi Read get_table Retrieve comprehensive table information including schema, fields, and metadata - use this to understand struc Read get_table_data Retrieve sample data from table for preview and analysis - use this to examine content, verify quality, or und Read get_table_fks Retrieve foreign key relationships for a table - use this to understand data connections, build joins, or expl Read get_table_query_metadata Retrieve query-optimized table metadata for building dynamic queries - use this when constructing queries or b Read get_table_related Find tables and entities related through relationships or schemas - use this to discover connected data, find Read list_cards Retrieve all Metabase cards with optional filtering by source type (e.g., Read list_collections Retrieve all Metabase collections for organizing analytical content - use this to understand content structure Read list_dashboards Retrieve all Metabase dashboards - use this to discover available dashboards, get an overview of analytical co Read list_database_schemas Retrieve all schema names in a database - use this to explore database organization or navigate multi-schema d Read list_databases Retrieve all database connections in Metabase - use this to discover available data sources, check connection Read list_embeddable_cards Retrieve all Metabase cards configured for embedding in external applications (requires admin privileges) - us Read list_embeddable_dashboards Retrieve all Metabase dashboards configured for embedding (requires superuser) - use this to audit embedded co Read list_public_cards Retrieve all Metabase cards that have public URLs enabled (requires admin privileges) - use this to audit publ Read list_public_dashboards Retrieve all Metabase dashboards with public URLs enabled (requires superuser) - use this to audit publicly ac Read list_tables Retrieve all Metabase tables with optional ID filtering - use this to discover available tables, explore datab Read list_users Retrieve all Metabase users with their roles and permissions - use this to understand user access, manage perm Read search_card_param_values Search and filter available parameter values for a Metabase card using a text query - use this to find specifi Read search_content Search across all Metabase content including cards, dashboards, collections, and models - use this to find spe Read search_dashboards Search dashboards by name or description text - use this to find specific dashboards or discover related analy Read validate_database Test database connection parameters before creating - use this to verify credentials, connectivity, and access

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Metabase MCP Server

Can an AI agent delete data through the Metabase MCP Server MCP server? +

Yes. The Metabase MCP Server server exposes 10 destructive tools including delete_card, delete_card_public_link, delete_collection. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Metabase MCP Server? +

The Metabase MCP Server server has 30 write tools including add_card_to_dashboard, add_sample_database, add_text_block. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Metabase MCP Server.

How many tools does the Metabase MCP Server MCP server expose? +

87 tools across 4 categories: Destructive, Execute, Read, Write. 41 are read-only. 46 can modify, create, or delete data.

How do I enforce a policy on Metabase MCP Server? +

Register the Metabase MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Metabase MCP Server tool call.

Deterministic rules across all 87 Metabase MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON METABASE →

Instant setup, no code required.

87 Metabase MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.