# Looker Admin MCP
MCP server for **Looker administration**. Provides 60+ admin tools for user, group, role, schedule, alert, and content access management through the Model Context Protocol (MCP).
> **Note**: This server focuses on **administration** tasks, complementing [Google's MCP Toolbox for Databases](https://github.com/googleapis/genai-toolbox) which handles analytics and data querying.
## Features
| Category | Tools | Operations |
|----------|-------|------------|
| **User Management** | 9 | CRUD, role assignment |
| **Group Management** | 9 | CRUD, membership |
| **Role Management** | 11 | Roles, permissions, model sets |
| **Scheduled Plans** | 8 | CRUD, run-once |
| **Alerts** | 7 | CRUD, follow/unfollow |
| **Content Access** | 8 | Folders, permissions |
| **System** | 8 | Sessions, user attributes |
## Safety
Destructive operations (`delete_user`, `delete_group`, `delete_role`, etc.) require `confirm=True` parameter to execute.
```
# Example: Delete a user
delete_user(user_id=123) # Returns warning, doesn't delete
delete_user(user_id=123, confirm=True) # Actually deletes
```
## Prerequisites
- [Python 3.11+](https://www.python.org/)
- [uv](https://github.com/astral-sh/uv) (Python package manager)
- [Docker Desktop](https://www.docker.com/products/docker-desktop/) (Recommended)
## Quick Start
1. **Clone and setup:**
```sh
git clone <repository-url>
cd looker-mcp
uv venv && source .venv/bin/activate
uv pip install -e .
```
2. **Configure credentials:**
```sh
cp .env.example .env
# Edit .env with your Looker credentials
```
3. **Build Docker image:**
```sh
./docker-build-run.sh build
```
## MCP Client Configuration
Add to your client's MCP config (e.g., `.cursor/mcp.json`):
```json
{
"mcpServers": {
"looker-admin": {
"command": "docker",
"args": [
"run", "--rm", "-i",
"-e", "MCP_MODE=stdio",
"-e", "LOOKERSDK_BASE_URL=${.env:LOOKERSDK_BASE_URL}",
"-e", "LOOKERSDK_CLIENT_ID=${.env:LOOKERSDK_CLIENT_ID}",
"-e", "LOOKERSDK_CLIENT_SECRET=${.env:LOOKERSDK_CLIENT_SECRET}",
"-e", "LOOKERSDK_VERIFY_SSL=${.env:LOOKERSDK_VERIFY_SSL}",
"looker-mcp:latest"
]
}
}
}
```
## Available Tools
### User Management (9 tools)
- `looker_me` - Get current authenticated user
- `list_users` - List all users with pagination
- `search_users` - Search by email, name, status
- `get_user` - Get user details
- `create_user` - Create new user
- `update_user` - Update user info
- `delete_user` - Delete user (requires confirm=True)
- `get_user_roles` - Get user's roles
- `set_user_roles` - Assign roles to user
### Group Management (9 tools)
- `list_groups` - List all groups
- `search_groups` - Search groups by name
- `get_group` - Get group details
- `create_group` - Create new group
- `update_group` - Rename group
- `delete_group` - Delete group (requires confirm=True)
- `list_group_users` - List members in group
- `add_user_to_group` - Add user to group
- `remove_user_from_group` - Remove user from group
### Role Management (11 tools)
- `list_roles` - List all roles
- `get_role` - Get role details with permissions
- `create_role` - Create new role
- `update_role` - Update role
- `delete_role` - Delete role (requires confirm=True)
- `list_permission_sets` - List permission sets
- `get_permission_set` - Get permission set details
- `list_model_sets` - List model sets
- `get_model_set` - Get model set details
- `create_model_set` - Create new model set
- `list_role_users` - List users with a role
### Scheduled Plans (8 tools)
- `list_scheduled_plans` - List all schedules
- `get_scheduled_plans_for_dashboard` - Get dashboard schedules
- `get_scheduled_plans_for_look` - Get look schedules
- `get_scheduled_plan` - Get schedule details
- `create_scheduled_plan` - Create new schedule
- `update_scheduled_plan` - Update schedule
- `delete_scheduled_plan` - Delete schedule (requires confirm=True)
- `run_scheduled_plan_once` - Run schedule immediately
### Alerts (7 tools)
- `search_alerts` - Find alerts
- `get_alert` - Get alert details
- `create_alert` - Create new alert
- `update_alert` - Update alert
- `delete_alert` - Delete alert (requires confirm=True)
- `follow_alert` - Subscribe to alert
- `unfollow_alert` - Unsubscribe from alert
### Content Access (8 tools)
- `list_folders` - List folders
- `get_folder` - Get folder details
- `get_folder_children` - Get folder contents
- `get_folder_ancestors` - Get folder hierarchy
- `search_folders` - Search folders
- `get_content_metadata_access` - Get permissions
- `update_content_metadata_access` - Set permissions
- `get_content_access` - Get detailed access rules
### System Admin (8 tools)
- `list_user_sessions` - List active sessions
- `delete_user_session` - Kill session (requires confirm=True)
- `list_user_attributes` - List user attributes
- `get_user_attribute` - Get attribute details
- `get_user_attribute_values` - Get user's attribute values
- `set_user_attribute_value` - Set attribute value
- `get_api_versions` - Get API versions
- `get_looker_version` - Get Looker instance version
## Project Structure
```
src/looker_admin_mcp/
├── client/
│ ├── sdk.py # SDK initialization
│ └── models.py # TypedDicts for responses
├── server/
│ ├── looker.py # Main server + error handling
│ ├── main.py # Entry point
│ └── transports.py # Stdio/SSE transport
└── tools/
├── user.py # User management (9 tools)
├── groups.py # Group management (9 tools)
├── roles.py # Role management (11 tools)
├── schedules.py # Scheduled plans (8 tools)
├── alerts.py # Alert management (7 tools)
├── content_access.py # Folder/permissions (8 tools)
└── system.py # System admin (8 tools)
```
## Environment Variables
```sh
LOOKERSDK_BASE_URL=https://your-looker-instance.com
LOOKERSDK_CLIENT_ID=your_client_id
LOOKERSDK_CLIENT_SECRET=your_client_secret
LOOKERSDK_VERIFY_SSL=true
LOOKERSDK_TIMEOUT=120 # Optional
```
## Complementary Tools
This server handles **administration**. For **analytics/data**:
- [Google MCP Toolbox](https://github.com/googleapis/genai-toolbox) - Query data, explore models, create dashboards
