{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-07-05","analysis_method":"capability_triage","category":"Web Connector","description":"Search tables and metrics, explore field values, and construct or run queries against your data.","did":"ant-dir-metabase","homepage_url":"https://www.metabase.com/","icon":"https://metabase.com/favicon.ico","id":"ant.dir.metabase","installs":15478,"last_scanned":"2026-07-05","license":"","long_description":"Search tables and metrics, explore field values, and construct or run queries against your data.","name":"Metabase","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ant-dir-metabase&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"Metabase","publisher_url":"https://www.metabase.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"The connector can search tables/metrics and retrieve field values and query results, which may include sensitive business or personal data stored in Metabase.","risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"},{"description":"With write access it can create new saved artifacts (questions/dashboards) and potentially alter how data is presented or shared within Metabase.","risk_type":"modifies_data","severity":"medium","title":"Can change or update your information"},{"description":"The connector can construct and execute queries; depending on the connected database permissions, this could enable powerful actions (e.g., heavy/expensive queries or non-read SQL if permitted) and broad data access.","risk_type":"runs_code","severity":"high","title":"Can run commands or queries on your behalf"},{"description":"Using the connector typically involves storing an API key/session token so it can query Metabase and underlying data sources over time.","risk_type":"requires_persistent_credentials","severity":"medium","title":"Stores long-lived access tokens"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["modifies_data","reads_private_data","requires_persistent_credentials","runs_code"],"tools":[{"description":"Searches for Metabase objects such as tables, fields, metrics, or saved items.","name":"search"},{"description":"Retrieves metadata/details for a specified table.","name":"get_table"},{"description":"Fetches values for a specific field/column in a table for exploration.","name":"get_table_field_values"},{"description":"Retrieves details/definition for a specified metric.","name":"get_metric"},{"description":"Fetches values associated with fields used by a metric.","name":"get_metric_field_values"},{"description":"Builds a query definition based on provided parameters or selections.","name":"construct_query"},{"description":"Runs a constructed query and returns results from the data source.","name":"execute_query","risk":{"category":"code_execution","level":"high","why":"Executing queries can expose large volumes of data and, if the underlying database allows, could perform non-read operations or resource-intensive workloads."}},{"description":"Creates and/or runs a query against the connected data and returns results.","name":"query","risk":{"category":"code_execution","level":"high","why":"Running ad-hoc queries can access sensitive datasets broadly and may be able to trigger non-read behavior depending on database permissions."}},{"description":"Generates a visualization based on a query and its results.","name":"visualize_query"},{"description":"Creates a saved question (report) in Metabase based on a query or configuration.","name":"create_question","risk":{"category":"state_change","level":"medium","why":"Creates persistent analytics artifacts that can change what data is surfaced or shared within Metabase."}},{"description":"Creates a new dashboard container in Metabase for organizing questions and visualizations.","name":"create_dashboard","risk":{"category":"state_change","level":"medium","why":"Creates persistent objects that can impact reporting and potentially broaden data visibility to other users."}}],"tools_count":11,"type":"web_connector","url":"https://claude.ai/directory/13e064b4-8243-4ab8-ae2d-b5329200f854","uuid":"13e064b4-8243-4ab8-ae2d-b5329200f854","version":""},"query_key":"metabase","schema_version":1,"status":"match"}