Metabase MCP

Query and manage Metabase dashboards, cards, and data via Claude

→ 1luvc0d3/metabase-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 1 critical

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 3 credentials: ANTHROPIC_API_KEY, MCP_AUTH_TOKEN, METABASE_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 critical

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@4.0.0GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_SQL_PATTERNS

🔐 secretANTHROPIC_API_KEY— No - Enables NLQ and insight tools

configAUDIT_LOG_FILE— This extension does not retain any data. Audit logs (if enabled via ) are written to your local filesystem only, with owner-only permissions (0600)

configBLOCKED_SQL_PATTERNS

configLLM_DAILY_TOKEN_LIMIT

configLLM_FALLBACK_MODEL

configLLM_MODEL

configLLM_MONTHLY_TOKEN_LIMIT

configLLM_RETRY_ATTEMPTS

configLLM_RETRY_DELAY_MS

configLLM_TIMEOUT_MS

configLOG_LEVEL— No info Logging: debug, info, warn, error

🔐 secretMCP_AUTH_TOKEN

configMCP_CORS_ORIGIN

configMCP_HTTP_HOST

configMCP_HTTP_PORT

configMCP_MODE— No read Server mode: read, write, or full

configMCP_TRANSPORT

🔐 secretMETABASE_API_KEY— Yes - Metabase API key

configMETABASE_MAX_ROWS— No 10000 Max rows returned per query

configMETABASE_TIMEOUT— No 30000 Request timeout (ms)

configMETABASE_URL— Yes - Your Metabase instance URL

configRATE_LIMIT_REQUESTS_PER_MINUTE— No 60 Rate limit threshold

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/1luvc0d3-metabase-mcp-h6xhf1)](https://m8ven.ai/mcp/1luvc0d3-metabase-mcp-h6xhf1)

commit: f225c6e45bad069f7a13cd8f31672f8d56cac565

code hash: d069f97ed2b6f7cc6b89b1b71265380e3ee88d36f7e757faa804b1f3fb4bdc32

verified: 6/17/2026, 12:03:54 PM

view raw JSON →