metabase-mcp

Item: metabase-mcp
Rating: 74
Author: M8ven

An MCP server for Metabase that enables executing SQL queries and saved cards, with options to export results as CSV or XLSX, while enforcing read-only mode and database whitelisting for security.

→ itsshreyanshhere/internal-metabase-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUDIT_LOG_PATH— Path to the audit log file (default: ./audit.log)

configCONTEXT_DIR

configEXPORT_DIRECTORY— Directory where export files are written (default: ./exports)

configMCP_COLLECTION_ID

configMETABASE_ALLOWED_DB_IDS— Comma-separated list of allowed database IDs (e.g. 1,2,3). Leave empty to allow all.

configMETABASE_READ_ONLY_MODE— true (default) blocks INSERT/UPDATE/DELETE/DROP/etc. and comment syntax

configREQUIRE_CONFIRMATION

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/itsshreyanshhere-internal-metabase-mcp-530277)](https://m8ven.ai/mcp/itsshreyanshhere-internal-metabase-mcp-530277)

commit: be517939eb0c323b972f6154319a1f0a3f1daf4c

code hash: fe2dbd47744c9ae0eaf2245b64ef28162c206e0171ef8ecedb31f0962ea315d4

verified: 7/15/2026, 8:48:03 AM

view raw JSON →