96
/ 100
1 day ago
glama
Metabase
Metabase includes a built-in Model Context Protocol (MCP) server that lets AI clients connect directly to a Metabase instance. It uses the Streamable HTTP transport and builds on Metabase's Agent API to expose tools for searching, exploring, querying, and visualizing data — all scoped to the connecting user's permissions.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: GITHUB_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 6 credentials: CYPRESS_ALL_FEATURES_TOKEN, CYPRESS_MB_ALL_FEATURES_TOKEN, ENTERPRISE_TOKEN, MB_ALL_FEATURES_TOKEN, METABASE_JWT_SHARED_SECRET, SHOPPY_DATADOG_CLIENT_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
BACKEND_PORTconfig
CLIENT_PORTconfig
CROSS_VERSION_DEV_MODE🔐 secret
CYPRESS_ALL_FEATURES_TOKENconfig
CYPRESS_BROWSERconfig
CYPRESS_GUI🔐 secret
CYPRESS_MB_ALL_FEATURES_TOKENconfig
CYPRESS_RETRIESconfig
CYPRESS_VIDEOconfig
ENABLE_NETWORK_THROTTLING🔐 secret
ENTERPRISE_TOKENconfig
FAIL_FASTconfig
FE_HEALTHCHECK_URLconfig
GREPconfig
HOST_APP_ENVIRONMENTconfig
JAR_PATHconfig
JDK_JAVA_OPTIONS🔐 secret
MB_ALL_FEATURES_TOKENconfig
MB_CUSTOM_VIZ_PLUGIN_DEV_MODE_ENABLEDconfig
MB_DB_FILEconfig
MB_EDITIONconfig
MB_ENABLE_TEST_LOCALESconfig
MB_FRONTEND_DEV_PORTconfig
MB_INTERNAL_DO_NOT_USE_SAMPLE_DB_DIRconfig
MB_JETTY_HOSTconfig
MB_JETTY_PORTconfig
MB_RUN_MODEconfig
MB_SNOWPLOW_URLconfig
METABASE_INSTANCE_URL🔐 secret
METABASE_JWT_SHARED_SECRETconfig
METASTORE_DEV_SERVER_URLconfig
NEXT_PUBLIC_MB_PORTconfig
NG_APP_MB_PORTconfig
SAMPLE_APP_ENVIRONMENTconfig
SDK_FIXUP_VERBOSE_LOGSconfig
SHOPPY_DATADOG_APPLICATION_ID🔐 secret
SHOPPY_DATADOG_CLIENT_TOKENconfig
SHOPPY_DATADOG_ENVconfig
SHOPPY_DATADOG_SITE// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/metabase-metabase-146479)commit: 116c9343a4708cd600852c746ec3a31a3fbf7955
code hash: 4986371765d08c5b2cdd90346ebcb4a19739edabe5858b7481bbbe53cb8bd85e
verified: 6/2/2026, 11:02:49 AM