{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-07-05","analysis_method":"capability_triage","category":"Web Connector","description":"Helping agents see and understand data.","did":"ant-dir-tableau","homepage_url":"","icon":"https://tableau.github.io/favicon.ico","id":"ant.dir.tableau","installs":8530,"last_scanned":"2026-07-05","license":"","long_description":"Helping agents see and understand data.","name":"Tableau","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ant-dir-tableau&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"","publisher_url":"","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"The connector can list and retrieve Tableau content (users, projects, workbooks, views, custom views, and Admin Insights) and query datasources, which may expose sensitive business data and user information.","risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"},{"description":"It can update extract refresh tasks and reset consent, altering how data refreshes run and how users have granted access.","risk_type":"modifies_data","severity":"medium","title":"Can change or update your information"},{"description":"It can delete datasources, workbooks, and extract refresh tasks; these actions may permanently remove analytics assets and disrupt reporting and refresh pipelines.","risk_type":"deletes_data","severity":"high","title":"Can permanently delete data"},{"description":"OAuth token issuance and revocation capabilities imply use of access tokens that may be stored and reused, increasing risk if tokens are mishandled or leaked.","risk_type":"requires_persistent_credentials","severity":"medium","title":"Stores long-lived access tokens"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["deletes_data","modifies_data","reads_private_data","requires_persistent_credentials"],"tools":[{"description":"Lists available Tableau datasources.","name":"list-datasources"},{"description":"Deletes a specified Tableau datasource.","name":"delete-datasource","risk":{"category":"destructive","level":"high","why":"Deleting a datasource can permanently remove a shared data asset and break dependent workbooks/views."}},{"description":"Lists extract refresh tasks configured in Tableau.","name":"list-extract-refresh-tasks"},{"description":"Deletes an extract refresh task.","name":"delete-extract-refresh-task","risk":{"category":"destructive","level":"high","why":"Removing a refresh task can permanently disable scheduled refresh behavior and disrupt reporting freshness."}},{"description":"Updates configuration for a cloud extract refresh task.","name":"update-cloud-extract-refresh-task","risk":{"category":"state_change","level":"medium","why":"Changing refresh task settings can alter data update frequency, load, and downstream reporting behavior."}},{"description":"Lists jobs running or recently run in Tableau.","name":"list-jobs"},{"description":"Lists users in the Tableau site or environment.","name":"list-users"},{"description":"Lists Tableau workbooks.","name":"list-workbooks"},{"description":"Deletes a specified Tableau workbook.","name":"delete-workbook","risk":{"category":"destructive","level":"high","why":"Deleting a workbook can permanently remove dashboards and reports relied on by users."}},{"description":"Lists Tableau projects.","name":"list-projects"},{"description":"Lists views within Tableau workbooks.","name":"list-views"},{"description":"Lists custom views saved by users.","name":"list-custom-views"},{"description":"Runs a query against a Tableau datasource.","name":"query-datasource","risk":{"category":"code_execution","level":"high","why":"Query execution can be used to retrieve sensitive data at scale and, depending on backend, may enable heavy/abusive queries."}},{"description":"Retrieves metadata for a Tableau datasource (e.g., fields/structure).","name":"get-datasource-metadata"},{"description":"Obtains an OAuth access token for Tableau APIs.","name":"get-oauth-token","risk":{"category":"privilege","level":"high","why":"Issuing access tokens grants authenticated API access and may enable broad data access if scopes are permissive."}},{"description":"Retrieves details for a Tableau workbook.","name":"get-workbook"},{"description":"Retrieves details for a Tableau view.","name":"get-view"},{"description":"Fetches the underlying data for a Tableau view.","name":"get-view-data"},{"description":"Fetches a rendered image of a Tableau view.","name":"get-view-image"},{"description":"Fetches the underlying data for a Tableau custom view.","name":"get-custom-view-data"},{"description":"Fetches a rendered image of a Tableau custom view.","name":"get-custom-view-image"},{"description":"Lists all Tableau Pulse metric definitions.","name":"list-all-pulse-metric-definitions"},{"description":"Retrieves Pulse metric definitions for provided definition IDs.","name":"list-pulse-metric-definitions-from-definition-ids"},{"description":"Lists Pulse metrics for a given metric definition.","name":"list-pulse-metrics-from-metric-definition-id"},{"description":"Retrieves Pulse metrics for provided metric IDs.","name":"list-pulse-metrics-from-metric-ids"},{"description":"Lists subscriptions to Pulse metrics.","name":"list-pulse-metric-subscriptions"},{"description":"Generates an insight bundle for Pulse metric values.","name":"generate-pulse-metric-value-insight-bundle"},{"description":"Generates a summarized insight brief for Pulse.","name":"generate-pulse-insight-brief"},{"description":"Searches across Tableau content (workbooks, views, datasources, etc.).","name":"search-content"},{"description":"Revokes an existing OAuth access token.","name":"revoke-access-token","risk":{"category":"privilege","level":"medium","why":"Revoking tokens changes authentication state and can interrupt integrations relying on the token."}},{"description":"Resets user/app consent status for OAuth or connected access.","name":"reset-consent","risk":{"category":"privilege","level":"medium","why":"Resetting consent alters authorization state and may force re-authorization or disrupt connected applications."}},{"description":"Queries Tableau Admin Insights time-series events.","name":"query-admin-insights-ts-events","risk":{"category":"code_execution","level":"high","why":"Running queries on Admin Insights can enable broad extraction of sensitive operational/audit telemetry and may be abused for heavy querying."}},{"description":"Queries Tableau Admin Insights about site content.","name":"query-admin-insights-site-content","risk":{"category":"code_execution","level":"high","why":"Query access can facilitate large-scale retrieval of site inventory/metadata and potentially sensitive governance information."}},{"description":"Queries Tableau Admin Insights job performance data.","name":"query-admin-insights-job-performance","risk":{"category":"code_execution","level":"high","why":"Querying job performance can expose sensitive operational details and may enable abusive query workloads."}},{"description":"Retrieves a report identifying stale or unused content.","name":"get-stale-content-report"}],"tools_count":35,"type":"web_connector","url":"","uuid":"ant.dir.gh.tableau.tableau-mcp","version":""},"query_key":"tableau","schema_version":1,"status":"match"}