create_calculated_column · PowerBI MCP Server MCP

WHAT IT DOES

What create_calculated_column does on PowerBI MCP Server

AI agents use create_calculated_column to create or update resources in PowerBI MCP Server — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your PowerBI MCP Server environment.

WHY IT NEEDS A POLICY

Why create_calculated_column needs a policy

Creating a calculated column modifies a PowerBI table by adding a new column definition and populating it with computed values. This is a reversible write operation—the column can be deleted or modified later. It does not execute arbitrary code or delete data, so it is not Execute or Destructive. The impact is confined to the specific table and dataset being modified, giving it medium severity rather than high.

From the tool's definition Tool name is 'create_calculated_column' and description states 'Create a calculated column in a PowerBI table'. The word 'create' indicates a write operation that adds new data/schema elements to an existing table.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

create_calculated_column Rate-limited

create_calculated_column stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_calculated_column": {
      "limits": [
        {
          "counter": "create_calculated_column_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches PowerBI MCP Server, so you can run agents against it safely.

FAQ

Questions about create_calculated_column

What does the create_calculated_column tool do? +

Create a calculated column in a PowerBI table. It is categorised as a Write tool in the PowerBI MCP Server MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on create_calculated_column? +

Register the PowerBI MCP Server MCP server in PolicyLayer and add a rule for create_calculated_column: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches PowerBI MCP Server. Nothing to install.

What risk level is create_calculated_column? +

create_calculated_column is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit create_calculated_column? +

Yes. Add a rate_limit block to the create_calculated_column rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block create_calculated_column completely? +

Set action: deny in the PolicyLayer policy for create_calculated_column. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides create_calculated_column? +

create_calculated_column is provided by the PowerBI MCP Server MCP server (pkduongsu/powerbi-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.