Claude security directory

Metabase

Published by Metabase

High risk

Search tables and metrics, explore field values, and construct or run queries against your data.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can search tables/metrics and retrieve field values and query results, which may include sensitive business or personal data stored in Metabase.
  • Can change or update your information: With write access it can create new saved artifacts (questions/dashboards) and potentially alter how data is presented or shared within Metabase.
  • Can run commands or queries on your behalf: The connector can construct and execute queries; depending on the connected database permissions, this could enable powerful actions (e.g., heavy/expensive queries or non-read SQL if permitted) and broad data access.
  • Stores long-lived access tokens: Using the connector typically involves storing an API key/session token so it can query Metabase and underlying data sources over time.

Available capabilities

This add-on exposes 11 tools or capabilities.

  • search
  • get_table
  • get_table_field_values
  • get_metric
  • get_metric_field_values
  • construct_query
  • execute_query
  • query
  • visualize_query
  • create_question
  • create_dashboard

The interactive security report will load automatically.