Atlas / MCP servers / tableau / Tableau MCP

Tableau MCPCAUTION

Name: Tableau MCP
Author: tableau

mcp/tableau/tableau-mcp

MCP server by tableau · mcp · mcp server · modelcontextprotocol · Audited 2026-10-12

⚑ Report / re-scan Source ↗

Tableau's official MCP Server. Helping agents see and understand data.

Verdict

CAUTION

Grade

Trust score

70 /100

Exposed tools

9 6r · 3w · 0d

Transport

stdio · streamable-http

License

Apache-2.0

Stars

351

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.tableau.com/support-levels-it-and-developer-tools)

[](https://github.com/tableau/tableau-mcp/actions/workflows/ci.yml)

[](https://www.npmjs.com/package/@tableau/mcp-server)

Overview

Tableau MCP is a suite of developer primitives, including tools, resources and prompts, that will make it easier for developers to build AI applications that integrate with Tableau.

Official Documentation

https://tableau.github.io/tableau-mcp/

Getting Started

Hosted Tableau MCP (Recommended for Tableau Cloud)

Tableau MCP is available as a managed service at `https://mcp.tableau.com`. It uses OAuth 2.1 so every user signs in with their own Tableau Cloud identity, and all existing per-user permissions are enforced automatically.

Point any MCP-compatible client at https://mcp.tableau.com and complete the OAuth sign-in flow when prompted.

See Popular Client Integrations for step-by-step setup instructions for Slack, Claude, ChatGPT, and other common AI clients.

Tableau Server customers and Cloud customers who require self-hosted infrastructure should see the Enterprise Deployment and Self-Hosted Getting Started guides.

Self-Hosted / Local (npx)

The quickest way to run Tableau MCP locally. Requires Node.js 22.7.5 or later — no cloning or building needed. Configure your AI tool (MCP client) with:

{
"mcpServers": {
"tableau": {
"command": "npx",
"args": ["-y", "@tableau/mcp-server@latest"],
"env": {
"SERVER":

Read from source at commit 4f9cfb82edf3OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add mcp-server --env AUTH=${AUTH} --env OAUTH_DISABLE_SCOPES=${OAUTH_DISABLE_SCOPES} --env OAUTH_EMBEDDED_AUTHZ_SERVER=${OAUTH_EMBEDDED_AUTHZ_SERVER} --env OAUTH_ISSUER=${OAUTH_ISSUER} -- npx -y @tableau/[email protected]

claude-desktop

{
  "mcpServers": {
    "mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@tableau/[email protected]"
      ],
      "env": {
        "AUTH": "${AUTH}",
        "OAUTH_DISABLE_SCOPES": "${OAUTH_DISABLE_SCOPES}",
        "OAUTH_EMBEDDED_AUTHZ_SERVER": "${OAUTH_EMBEDDED_AUTHZ_SERVER}",
        "OAUTH_ISSUER": "${OAUTH_ISSUER}"
      }
    }
  }
}

Exposed tools (9)

6 read · 3 write · 0 destructive.

Tool	Risk	Description
`Default`	read	The default project that was automatically created by Tableau.
`Primary`	read
`Samples`	read	Sample content shipped with Tableau.
`extract-optimization-apply`	write	Tableau Cloud admin workflow (destructive Apply phase): take the recommendations from the
`job-optimization-inform`	read	Tableau Cloud admin workflow: analyze Admin Insights job performance and surface optimization
`stale-content-cleanup-apply`	write	Tableau Cloud admin workflow (destructive Apply phase): find stale workbooks and published
`stale-content-cleanup-inform`	read	Tableau Cloud admin workflow: identify stale workbooks and published datasources by
`user-license-reclamation-apply`	write	Tableau Cloud admin workflow (destructive Apply phase): identify inactive licensed users
`user-license-reclamation-inform`	read	Tableau Cloud admin workflow: identify inactive licensed users who are candidates for

Trust audit

CAUTIONgrade C · trust 70/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (2 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: found

Findings (23)

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

src/tools/web/tool.test.ts:603

token: 'fake-mcp-access-token',

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

src/web/apps/src/embed/getEmbedTokenToolClient.test.ts:17

token: 'test-bearer-token-12345',

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

tests/oauth/embedded-authz/oauth.test.ts:827

.send({ token: 'unknown-token-that-does-not-exist' });

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

docs/docs/configuration/mcp-config/authentication/uat.md:68

-----BEGIN RSA PRIVATE KEY-----\nMIIE...HZ3Q==\n-----END RSA PRIVATE KEY-----

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

docs/docs/configuration/mcp-config/oauth.md:229

-----BEGIN RSA PRIVATE KEY-----\nMIIE...HZ3Q==\n-----END RSA PRIVATE KEY-----

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

docs/docs/enterprise/tableau-server.md:249

#OAUTH_JWE_PRIVATE_KEY=-----BEGIN RSA PRIVATE KEY-----\nMIIE...HZ3Q==\n-----END RSA PRIVATE KEY-----

LOWInventory / provenance · inv.binary · CWE-1104

tests/e2e/fixtures/workbooks/badtwbx.twbx

badtwbx.twbx

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

LOWInventory / provenance · inv.hidden_file · CWE-1104

.mcpbignore

.mcpbignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

docs/static/.nojekyll

.nojekyll

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/desktop/commands/workbook/getWorkbookXml.test.ts:3

import { LocalExecutor } from '../../toolExecutor/localToolExecutor.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/desktop/commands/workbook/getWorkbookXml.test.ts:6

vi.mock('../../toolExecutor/localToolExecutor.js');

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/desktop/commands/workbook/getWorkbookXml.ts:7

} from '../../toolExecutor/toolExecutor.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/desktop/commands/workbook/listDashboards.test.ts:3

import { LocalExecutor } from '../../toolExecutor/localToolExecutor.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/desktop/commands/workbook/listDashboards.test.ts:6

vi.mock('../../toolExecutor/localToolExecutor.js');