// SCAN REPORT

Metabase

28 tools. 19 can modify or destroy data without limits.

19 write tools that can modify data. Rate limits recommended.

Last updated: 3 Jul 2026

19 can modify or destroy data

9 read-only

28 tools total

Community server · catalogue entry verified 03/07/2026

How to control Metabase ↓

TOOL MAP

What Metabase exposes to your agents

Read (9) Write / Execute (19) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Metabase tools

Execute · High execute_card Although the immediate action (retrieving results) might appear read-like, the 'execute' terminology and the fact that saved cards can contain any Metabase operation (queries with side effects, potentially including writ Execute · High execute_mongodb_query This tool executes MongoDB queries, which can perform arbitrary database operations depending on the query provided. Execute · High execute_query This tool runs SQL queries with effects dependent on the query argument. Write · Medium add_card_to_dashboard This tool modifies dashboard configuration by adding a card to it.

19 of Metabase's 28 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Metabase

PolicyLayer is an MCP gateway — it sits between your AI agents and Metabase, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "add_card_to_dashboard": {
    "limits": [
      {
        "counter": "add_card_to_dashboard_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_dashboard_cards": {
    "limits": [
      {
        "counter": "get_dashboard_cards_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Metabase — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON METABASE →

Instant setup, no code required.

FULL CATALOGUE

All 28 Metabase tools

EXECUTE 3 tools

Execute execute_card Execute a saved Metabase question/card and retrieve results. Execute execute_mongodb_query execute_mongodb_query Execute execute_query Execute a native SQL query against a Metabase database.

WRITE 16 tools

Write add_card_to_dashboard add_card_to_dashboard Write create_card create_card Write create_collection Create a new collection in Metabase. Write create_dashboard create_dashboard Write create_model create_model Write create_mongodb_card create_mongodb_card Write reposition_dashboard_cards reposition_dashboard_cards Write set_card_template_tags set_card_template_tags Write set_dashcard_inline_parameters set_dashcard_inline_parameters Write set_dashcard_parameter_mappings set_dashcard_parameter_mappings Write update_card update_card Write update_card_display update_card_display Write update_card_parameters update_card_parameters Write update_dashboard update_dashboard Write update_dashboard_card_position update_dashboard_card_position Write update_model update_model

READ 9 tools

Read get_dashboard_cards get_dashboard_cards Read get_table_fields Get all fields/columns in a specific table. Read list_cards List all saved questions/cards in Metabase. Read list_collections list_collections Read list_dashboard_tab_cards List the cards belonging to a specific tab on a dashboard. Read list_dashboard_tabs List all tabs configured on a dashboard. Read list_dashboards List all dashboards in Metabase. Read list_databases List all databases configured in Metabase. Read list_tables List all tables in a specific database.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Metabase

How do I prevent bulk modifications through Metabase? +

The Metabase server has 16 write tools including add_card_to_dashboard, create_card, create_collection. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Metabase.

How many tools does the Metabase MCP server expose? +

28 tools across 3 categories: Execute, Read, Write. 9 are read-only. 19 can modify, create, or delete data.

How do I enforce a policy on Metabase? +

Register the Metabase MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Metabase tool call.

Deterministic rules across all 28 Metabase tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON METABASE →

Instant setup, no code required.

28 Metabase tools catalogued and risk-classified — across an index of 43,000+ MCP servers.