{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Explore data and published analytics in your Tableau Cloud environment. Query data sources, retrieve workbook or view data and images, and inspect metadata. Find Pulse metrics and generate insight briefs from their definitions.","did":"d2facf64-8a93-4ef6-a97c-b4539cbf6b36","documentation_url":"https://tableau.github.io/tableau-mcp/","editorial_description":{"extended_description":"Search projects, workbooks, views, data sources, and custom views. Pulse tools retrieve metric definitions, subscriptions, and insight bundles. Connection controls reset consent or revoke an access token.","schema_version":1,"summary":"Explore data and published analytics in your Tableau Cloud environment.\nQuery data sources, retrieve workbook or view data and images, and inspect metadata.\nFind Pulse metrics and generate insight briefs from their definitions."},"homepage_url":"","icon":"","id":"d2facf64-8a93-4ef6-a97c-b4539cbf6b36","installs":0,"last_scanned":"","license":"","long_description":"Search projects, workbooks, views, data sources, and custom views. Pulse tools retrieve metric definitions, subscriptions, and insight bundles. Connection controls reset consent or revoke an access token.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly includes reset-consent and revoke-access-token.","reasoning":"Revoking access credentials and resetting consent are account-security control actions.","risk_type":"credential_admin","severity":"high","title":"Connector consent and access tokens can be reset or revoked","triggering_tools_or_skills":["reset-consent","revoke-access-token"]},{"evidence":"The declared query-datasource action operates on private Tableau data models; the packet has no query grammar or read-only enforcement schema.","reasoning":"User-authored analytical queries against enterprise data are treated as High pending proof of strict bounded/read-only semantics.","risk_type":"query_execution","severity":"high","title":"Queries can execute against published Tableau data sources","triggering_tools_or_skills":["query-datasource"]},{"evidence":"The connector retrieves organization-authored Tableau artifacts and data.","reasoning":"Returned data/text may contain untrusted content.","risk_type":"prompt_injection_exposure","severity":"low","title":"Workbook and view content enters model context","triggering_tools_or_skills":["get-view-data","get-custom-view-data","search-content"]},{"evidence":"The connector runs at https://mcp.tableau.com/ without a pinned server implementation in the review packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Tableau Cloud is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Hosted Tableau MCP uses OAuth 2.1 for Tableau Cloud; specific site roles and administrative scopes are not shown in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d2facf64-8a93-4ef6-a97c-b4539cbf6b36.json","what_it_proves":"Candidate PR #125 record identity (name \"Tableau Cloud\", publisher, type web_connector) and 23 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d2facf64-8a93-4ef6-a97c-b4539cbf6b36: complete tool_names inventory (23 tools), remote streamable-http endpoint https://mcp.tableau.com/, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:14:44Z","url_or_path":"https://tableau.github.io/tableau-mcp/","what_it_proves":"Official landing page confirms this is Tableau's hosted OAuth 2.1 MCP service for querying Tableau data."}],"primary_reason":"Tableau exposes enterprise data querying plus token revocation and consent-reset controls.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d2facf64-8a93-4ef6-a97c-b4539cbf6b36","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 23 tools. The official landing page confirms identity and OAuth but not individual schemas, so confidence remains medium and query constraints require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":23,"tools_or_skills_total":23},"name":"Tableau Cloud","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d2facf64-8a93-4ef6-a97c-b4539cbf6b36&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.salesforce.com/company/legal/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Tableau","publisher_url":"https://www.tableau.com/","remote_url":"https://mcp.tableau.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Revoking access credentials and resetting consent are account-security control actions.","evidence":"Connector consent and access tokens can be reset or revoked: The complete inventory explicitly includes reset-consent and revoke-access-token.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Connector consent and access tokens can be reset or revoked","triggering_tools":["reset-consent","revoke-access-token"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-authored analytical queries against enterprise data are treated as High pending proof of strict bounded/read-only semantics.","evidence":"Queries can execute against published Tableau data sources: The declared query-datasource action operates on private Tableau data models; the packet has no query grammar or read-only enforcement schema.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Queries can execute against published Tableau data sources","triggering_tools":["query-datasource"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"ax-essentials@salesforce.com","tags":["modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"generate-pulse-insight-brief"},{"description":"","name":"generate-pulse-metric-value-insight-bundle"},{"description":"","name":"get-custom-view-data"},{"description":"","name":"get-custom-view-image"},{"description":"","name":"get-datasource-metadata"},{"description":"","name":"get-view"},{"description":"","name":"get-view-data"},{"description":"","name":"get-view-image"},{"description":"","name":"get-workbook"},{"description":"","name":"list-all-pulse-metric-definitions"},{"description":"","name":"list-custom-views"},{"description":"","name":"list-datasources"},{"description":"","name":"list-projects"},{"description":"","name":"list-pulse-metric-definitions-from-definition-ids"},{"description":"","name":"list-pulse-metric-subscriptions"},{"description":"","name":"list-pulse-metrics-from-metric-definition-id"},{"description":"","name":"list-pulse-metrics-from-metric-ids"},{"description":"","name":"list-views"},{"description":"","name":"list-workbooks"},{"description":"","name":"query-datasource","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-authored analytical queries against enterprise data are treated as High pending proof of strict bounded/read-only semantics."}},{"description":"","name":"reset-consent","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Revoking access credentials and resetting consent are account-security control actions."}},{"description":"","name":"revoke-access-token","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Revoking access credentials and resetting consent are account-security control actions."}},{"description":"","name":"search-content"}],"tools_count":23,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d2facf64-8a93-4ef6-a97c-b4539cbf6b36","uuid":"0debf4df-20f6-5289-a95b-078c03d34b1d","verification_tier":"community","version":""},"query_key":"tableau cloud","schema_version":1,"status":"match"}