tableau-graphql-mcp
tableau-graphql-mcp connects an MCP client to Tableau's Metadata API (Server or Cloud) so an AI assistant can answer lineage and impact questions over your Tableau content — read-only.
Ask anything via GraphQL —
graphql_queryruns any read-only Metadata API query (mutations/subscriptions rejected); flagspartial_resultswhen the ~20k node limit truncates a result.Learn the schema as you go —
introspect_schemalists Query entry points and type names, or a specific type's exact fields and args.Get correct queries handed to you —
lineage_examplesprovides a schema cheat-sheet plus 28 curated question-to-GraphQL templates across 8 categories (impact, provenance, calc, datasource, search, inventory, governance, ownership)."Where is this used?" —
where_usedfinds workbooks and published datasources that use given column/field/table names, using core lineage so it works without the Data Management add-on."What breaks if I change this?" —
impact_analysiswalks the full transitive multi-hop chain (calc-on-calc included) and returns affected fields, sheets, dashboards, workbooks, and de-duplicated owners to notify.Fuzzy name search —
search_contentfinds content by case-insensitive substring across workbooks, datasources, tables, fields, columns, with scanned/total coverage reported.Verify the connection —
server_inforeports server, site, product/REST API versions, endpoint in use, auth method, and whether Catalog lineage is available.Safe by design — read-only throughout, stdio-only (no inbound port), secrets from env only, HTTPS enforced, sends credentials only to your Tableau host.
Enables running read-only GraphQL queries against Tableau's Metadata API, including schema introspection, a library of curated query templates, and higher-level lineage tools (where-used lookups, multi-hop impact analysis, and substring content search) built on top of the GraphQL graph.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@tableau-graphql-mcpWhich workbooks break if I remove the SALES column?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
tableau-graphql-mcp turns your Tableau site's Metadata API into a set of MCP tools, so an AI assistant (Claude, Cursor, Cline, and others) can answer lineage questions in plain language:
"If I drop the column
SALES, which workbooks break?""What tables does the Sales Overview workbook depend on?"
"Which calculated fields reference
Profit, and on which dashboards?""Who should I notify before changing the
DIM_CUSTOMERtable?"
It ships seven curated tools: a universal GraphQL passthrough, live schema introspection, an embedded library of correct query templates, a robust where_used resolver, a multi-hop impact_analysis, a substring content search, and a connection probe. Together they let the model answer any lineage question, not just a fixed menu.
Why it's different
Any question, done right.
graphql_queryruns any read-only GraphQL;introspect_schemaand a built-in cheat-sheet plus 28 worked examples keep the model's queries correct.True impact analysis (multi-hop).
impact_analysisfollows the whole dependency chain (a calc built on a calc built on a column is included) and returns the full blast radius plus the de-duplicated owners to notify, not just direct references.Works everywhere. Tableau Server and Cloud. The REST API version and the GraphQL endpoint (
/api/metadata/graphql, with a/relationship-service-war/graphqlfallback) are auto-detected.Robust lineage without Catalog.
where_usedresolves workbooks via core lineage (referencedByFields -> sheets -> workbook), so it works even when the Data Management add-on'sdownstreamWorkbooksis empty.No silent truncation.
graphql_queryflagspartial_resultswhen a query hits the node limit, andsearch_contentreportsscanned/totalcoverage, so a truncated answer is never mistaken for a complete one.Tiny and safe. Read-only, stdio-only (no inbound port), secrets from env only, and no dependencies beyond the MCP SDK (stdlib
urllibfor HTTP).
Quickstart
You need uv (curl -LsSf https://astral.sh/uv/install.sh | sh) and a Tableau Personal Access Token.
Claude Code, one line:
claude mcp add tableau-graphql \
-e TABLEAU_SERVER=https://10ax.online.tableau.com \
-e TABLEAU_SITE_CONTENT_URL=YourSite \
-e TABLEAU_PAT_NAME=my-token \
-e TABLEAU_PAT_SECRET=the-full-secret \
-- uvx tableau-graphql-mcpThat's all. uvx fetches the package from PyPI and runs it in an isolated environment; nothing to clone or install (and no git required). Then ask Claude a lineage question.
Related MCP server: mcp-data-server
Configuration
All configuration is via environment variables (set them in your client's env block, never on the command line).
Env var | Required | Default | Description |
| yes | n/a |
|
| no |
| Site slug (the part after |
| yes¹ | n/a | Personal Access Token name. |
| yes¹ | n/a | PAT secret: the whole string, do not split on |
| no |
| Per-request timeout (seconds). |
| no | auto | REST API version; else read from |
| no | auto | Override the GraphQL path; else auto-detected. |
| no | off | Set to |
| no |
|
|
| no | n/a | Advanced: a pre-obtained |
| no | n/a | Advanced: a browser session cookie (SSO fallback). |
¹ Provide a PAT (TABLEAU_PAT_NAME + TABLEAU_PAT_SECRET) or an advanced TABLEAU_AUTH_TOKEN / TABLEAU_COOKIE.
Edit claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\):
{
"mcpServers": {
"tableau-graphql": {
"command": "uvx",
"args": ["tableau-graphql-mcp"],
"env": {
"TABLEAU_SERVER": "https://10ax.online.tableau.com",
"TABLEAU_SITE_CONTENT_URL": "YourSite",
"TABLEAU_PAT_NAME": "my-token",
"TABLEAU_PAT_SECRET": "the-full-secret"
}
}
}
}Fully quit and reopen Claude Desktop, then check the tools menu.
Every client uses the same mcpServers schema shown above. Add the same block to:
Cursor:
~/.cursor/mcp.json(global) or.cursor/mcp.json(project).Cline: the MCP Servers panel, then Configure, into
cline_mcp_settings.json.Windsurf:
~/.codeium/windsurf/mcp_config.json.
On Windows, if uvx isn't found by the GUI app, use its absolute path (e.g. %USERPROFILE%\.local\bin\uvx.exe).
Tools
Tool | What it does | Key args |
| Run any read-only Metadata API GraphQL query. The general tool for any lineage question. |
|
| Live schema introspection: list entry points, or a type's exact fields. |
|
| A schema cheat-sheet plus 28 curated question-to-GraphQL templates (8 categories). |
|
| Which workbooks/datasources use given column / field / table names (robust one-hop core-lineage resolution). |
|
| Full transitive multi-hop blast radius of a column/field/table: every dependent field, plus affected sheets, dashboards, workbooks, and owners to notify. |
|
| Find content whose name contains a term (case-insensitive substring), across workbooks, datasources, tables (and optionally fields/columns), with coverage numbers. |
|
| Connected server, site, versions, endpoint, auth, and whether Catalog lineage is available. | none |
All tools are read-only. The Metadata API has no mutations.
Example prompts
Once connected, try:
"Use server_info to confirm what you're connected to."
"Search for anything with 'revenue' in the name."
"Which workbooks use the columns SALES, PROFIT and DISCOUNT? Group by owner."
"Show me the field-to-source-column map for the 'Sales Overview' workbook."
"List every calculated field in that workbook with its formula."
"Which published datasources feed workbooks in the Analytics project, and which are uncertified?"
"Run impact_analysis on the 'Profit Ratio' field: every dependent sheet, dashboard, workbook, and owner to notify."
"What is the blast radius of dropping the DIM_CUSTOMER table: workbooks, sheets, and owners to notify?"
Architecture
The server speaks MCP over stdio to the client and HTTPS to Tableau: it signs in with your PAT to get an X-Tableau-Auth token (auto-refreshed on expiry), auto-detects the REST API version and the GraphQL endpoint, then forwards queries to the Metadata API. Nothing is stored; every answer is live.
Security
Read-only, enforced. Only GraphQL queries: no writes, no shell.
graphql_queryrejectsmutation/subscriptionoperations, and the Metadata API is query-only regardless.Declared read-only. Every tool carries the MCP
readOnlyHintannotation, so clients can verify it without reading the code.Local and stdio-only. No inbound network port is opened.
Secrets from env only. Never passed as tool arguments, never logged, never returned in output.
Credentials go only to your Tableau host. HTTPS is required, certificates are verified, and redirects are refused.
Least privilege. The PAT inherits your Tableau permissions; the API only returns content you can see.
Verifiable releases. Every GitHub release carries Sigstore signatures and a CycloneDX SBOM, and PyPI uploads use Trusted Publishing.
Pin a version in production:
uvx tableau-graphql-mcp==0.2.0.
See SECURITY.md for the threat model, data handling, disclosure policy and how to verify a release.
Troubleshooting
Symptom | Fix |
Server doesn't appear | Fully quit and relaunch the client; check the config path and JSON validity. |
| Install |
Sign-in fails (401) | Check the PAT name/secret and |
"Could not reach the Metadata API" | On Tableau Server, an admin must enable it: |
Empty | Expected without the Data Management add-on; use the |
Inspect the server directly with the MCP Inspector:
npx @modelcontextprotocol/inspector uvx tableau-graphql-mcpDevelopment
git clone https://github.com/tdries/tableau-graphQL-mcp && cd tableau-graphQL-mcp
uv sync --all-extras
uv run tableau-graphql-mcp # run from source
uv run pytest --cov=tableau_graphql_mcp # tests + coverage (offline; no Tableau needed)
uv run ruff check . # lint
uv run ruff format --check . # formatThe same gates run in CI (Linux/macOS/Windows, Python 3.10 to 3.13): ruff check,
ruff format --check, mypy --strict, and pytest with a coverage floor. The package
ships a PEP 561 py.typed marker, so importing it gives your type checker full types.
CodeQL scans every push, and a weekly fuzzing job (fuzz/) attacks the read-only guard.
Contributions welcome: see CONTRIBUTING.md and the Code of Conduct.
Roadmap
Shipped: published on PyPI and listed on the official MCP registry. Next:
Optional Data Management path: richer
downstreamWorkbookswhen Catalog is presentMore curated query templates in
lineage_examplesOptional response caching for repeated introspection within a session
Ideas and votes welcome in Discussions.
License
Available Tools
7 toolsgraphql_queryARead-only
Run ANY read-only GraphQL query against the Tableau Metadata API. This is the general-purpose tool; use it for any lineage question. Returns {"data": ..., "errors": ...}.
The Metadata API is a GraphQL graph of Tableau content (workbooks, sheets, dashboards,
datasources, fields) and, with the Data Management add-on, physical assets (databases,
tables, columns) and their upstream/downstream lineage.
How to write a correct query:
- Filters are EXACT and case-sensitive: `filter: {name: "X"}` or `filter: {nameWithin: ["X","Y"]}`
(nameWithin is the only multi/OR match; there is NO substring or regex).
- Every list field has a `<name>Connection` variant with `first`/`offset`/`after` + `pageInfo`
(page size max 1000). Keep one query under ~20,000 nodes; narrow filters and page.
- Fields is an interface; branch with `__typename` and inline fragments
(`... on ColumnField { columns { name } }`, `... on CalculatedField { formula }`).
- Reach a field's owning workbook via `datasource { ... on EmbeddedDatasource { workbook { name } } }`.
- `downstream*` fields (downstreamWorkbooks/Owners, external tables/columns) need Data Management
(Tableau Catalog) and are often empty otherwise; then resolve via core lineage
(referencedByFields -> sheets -> workbook), or just call the `where_used` tool.
Entry points include: workbooks, sheets, dashboards, publishedDatasources, embeddedDatasources,
fields, columnFields, calculatedFields, columns, databaseTables, customSQLTables, databases,
flows, tableauUsers, dataQualityWarnings. Call `lineage_examples` for ready-made query templates
and a schema cheat-sheet, or `introspect_schema` to inspect any type's exact fields.
Read-only: mutation and subscription operations are rejected. If a query exceeds the
~20,000-node limit, the response is flagged with `partial_results: true` and a `warning`
(it does NOT auto-page an arbitrary query) so you never mistake a truncated result for a
complete one.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | ||
| variables | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark it read-only and non-destructive, and the description adds important operational behavior: exact case-sensitive filters, no substring/regex, page size max 1000, an approximate 20,000-node limit, partial_results warnings, and no auto-paging of arbitrary queries. These are substantive details beyond the structured annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but well structured and front-loaded: the purpose and return shape come first, followed by concrete query-writing rules and alternatives. Every section provides useful guidance for a complex GraphQL tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex open-world GraphQL tool, the description covers API scope, query syntax constraints, pagination, result truncation behavior, read-only restrictions, and sibling alternatives. An output schema exists, so return-value explanation is not required.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must carry parameter meaning. It explains query construction in detail, including filters, pagination, fragments, and entry points, but does not explain the optional variables parameter at all, leaving one parameter undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: run ANY read-only GraphQL query against the Tableau Metadata API. It explicitly calls itself the general-purpose tool for lineage questions and distinguishes itself from introspect_schema and lineage_examples.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit usage guidance: use this for any lineage question, call lineage_examples for templates and introspect_schema for schema inspection, and use where_used when Catalog lineage is unavailable. It also states mutation and subscription operations are rejected.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
impact_analysisARead-only
Full transitive (MULTI-HOP) downstream impact of a column, field, or table. Returns every field that directly OR indirectly depends on it, and all affected sheets, dashboards, workbooks, plus the de-duplicated set of OWNERS to notify before a change.
This is the "what breaks if I change/drop this?" tool. Unlike `where_used` (one core-lineage
hop), it follows the whole dependency chain — a calc built on a calc built on the column is
included. `name` is exact and case-sensitive. Workbooks are derived from downstream
sheets/dashboards (the flat downstreamWorkbooks edge is unreliable). If it returns nothing on a
site without Data Management, the transitive lineage may not be indexed there — use `where_used`
for the direct references.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/openWorld annotations, the description discloses non-obvious traits: `name` is exact and case-sensitive, workbooks are derived from downstream sheets/dashboards because the flat downstreamWorkbooks edge is unreliable, and an empty result on a site without Data Management signals unindexed transitive lineage. These are exactly the operational caveats annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core capability, then the routing contrast, then operational caveats — a deliberate and useful ordering. It runs slightly long with the parenthetical asides, but every sentence carries distinct information rather than restating the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although an output schema exists (so return values need not be explained), the description voluntarily enumerates the return shape (dependent fields, sheets, dashboards, workbooks, de-duplicated owners) and covers the critical failure mode. Nothing an agent needs to invoke or interpret this tool is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With one parameter at 0% schema description coverage, the description must compensate, and it does: it tells the agent the argument accepts a column, field, or table and must match exactly and case-sensitively. It could still be clearer about naming conventions for non-column targets, but the key semantic is covered.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('transitive MULTI-HOP downstream impact of a column, field, or table') and immediately distinguishes itself from the sibling `where_used` (one-hop core lineage). An agent can select between the two without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit use case ('what breaks if I change/drop this?'), names the alternative `where_used` and the exact condition that selects it, plus a documented fallback when the tool returns nothing. Nothing is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
introspect_schemaARead-only
Introspect the live Metadata API GraphQL schema (introspection is enabled).
With no argument: returns every Query entry point (with its args) and the full list of
type names. With `type_name` (e.g. "Column", "Workbook", "DatabaseTable", "CalculatedField"):
returns that type's fields, their result types, and args, so you can write a correct query
against exactly what this server exposes.
| Name | Required | Description | Default |
|---|---|---|---|
| type_name | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnlyHint=true, destructiveHint=false, openWorldHint=true). The description adds real context beyond them: that introspection is enabled on this server, and what each invocation mode returns. It does not discuss error behavior for an invalid type name.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the action and its scope, then splits cleanly into the no-arg and type_name cases. Every sentence carries information; nothing is padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present and annotations covering safety, the description only needs to explain modes and the parameter, which it does. The one notable omission is any hint about failure behavior for a nonexistent type name.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must carry the parameter — and it does, explaining that `type_name` is optional, what happens when omitted, and giving concrete example values ("Column", "Workbook", "DatabaseTable", "CalculatedField"). Case sensitivity and invalid-value handling are left unstated.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb+resource: "Introspect the live Metadata API GraphQL schema" names exactly what is being inspected and what the two modes yield. It does not name a sibling (e.g. graphql_query) explicitly, so the differentiation is only implicit, which keeps it out of the top band.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states the two usage contexts — no argument for entry points/type names, `type_name` for a specific type's fields — and frames the purpose as "so you can write a correct query." It gives no explicit when-not or named alternative, so it stops short of 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lineage_examplesARead-only
Return a schema cheat-sheet and a library of curated lineage questions with their
correct GraphQL queries (+ example variables). Read this before composing a graphql_query.
Categories: impact, provenance, calc, datasource, search, inventory, governance, ownership.
Pass one to filter; omit to get them all. Each example has: question, graphql, variables, notes.
| Name | Required | Description | Default |
|---|---|---|---|
| category | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds value beyond that by disclosing the returned payload's shape (question, graphql, variables, notes) and the optional category filter semantics. It doesn't note rate limits or auth needs, but those are largely irrelevant for a static read tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the key instruction ('Read this before composing a graphql_query'), then the category list, then filter behavior, then the return shape. Every sentence earns its place and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be exhaustively described, yet the description summarizes the example fields. Combined with the enumerated categories and the when-to-use routing, an agent has everything needed to invoke this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the single `category` parameter is a bare string with no enum, so the schema gives an agent nothing. The description compensates fully by enumerating all eight valid values (impact, provenance, calc, datasource, search, inventory, governance, ownership) and explaining default behavior when omitted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: returns a schema cheat-sheet plus a library of curated lineage questions with their correct GraphQL queries and example variables. This is clearly distinguishable from siblings like graphql_query and introspect_schema, which perform queries rather than supply ready-made examples.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit timing guidance tied to a sibling: 'Read this before composing a `graphql_query`.' It also explains the filter behavior ('Pass one to filter; omit to get them all'). However, it never states when not to use it or lists alternative sibling tools for adjacent tasks.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_contentARead-only
Find content whose NAME contains term (case-insensitive SUBSTRING). Use this when you
only know part of a name, since every other tool and the Metadata API filter are exact-match.
Searches workbooks, published datasources, and database tables by default. Pass `types` to
choose from: "workbook", "datasource", "table", "field", "column". Returns matches grouped by
type. It pages through content client-side, so on a very large site it scans the first ~1200
of each type and says so in `note`; once you know the exact name, prefer `graphql_query` or `where_used`.
| Name | Required | Description | Default |
|---|---|---|---|
| term | Yes | ||
| types | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=true and destructiveHint=false, so the safety profile is covered. The description adds genuinely new behavioral context beyond them: it searches workbooks, published datasources and tables by default, groups results by type, pages client-side, scans only the first ~1200 of each type, and flags that truncation in a `note` field. Auth/rate-limit details are absent, but the pagination cap is a real disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the matching semantics before usage routing and the paging caveat. Every clause carries information an agent needs; no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, return values need not be explained, and the description still notes grouping and the `note` truncation field. Matching semantics, scope, parameter values, and the paging limit together leave nothing an agent needs to call this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and both properties carry only bare titles ('Term', 'Types'), so the description must compensate — and it does. It defines `term` as a case-insensitive substring match on name, and enumerates the `types` values ('workbook', 'datasource', 'table', 'field', 'column') plus the default search scope.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource — find content whose NAME contains a substring — and immediately scopes it against siblings by noting that every other tool and the Metadata API filter are exact-match. An agent can distinguish it from graphql_query and where_used without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use ('when you only know part of a name') and when-not ('once you know the exact name, prefer graphql_query or where_used'), naming the alternatives. Nothing about tool selection is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
server_infoARead-only
Report the connected Tableau environment: server URL, site, product & REST API version, which Metadata API endpoint is in use, the auth method, and whether external-asset (Data Management / Catalog) lineage appears available. Good first call to confirm the connection and understand what lineage depth to expect.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish this as a safe, read-only, open-world probe, so the description only needs to add context. It does: it discloses that the call inspects the live connection and even reports whether external-asset (Data Management/Catalog) lineage is available, which tells the agent how much depth to expect from lineage tooling. It omits any note about auth prereqs or failure behavior, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the payload of returned fields and followed by the call-ordering advice. The field list is dense but each item is meaningful; there is no filler, though the enumeration is at the edge of being exhaustive for a description.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a declared output schema, the description need not spell out return shape, and it doesn't need to — it instead supplies the interpretive layer (which fields matter, what lineage availability implies). For a zero-parameter diagnostic tool this is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so per the rubric the baseline is 4. The description correctly implies a no-argument diagnostic call and adds no misleading parameter guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb (report) plus resource (connected Tableau environment), and it enumerates the exact fields returned: server URL, site, product/REST API version, Metadata API endpoint, auth method, and lineage availability. This clearly separates it from the sibling lineage/query tools, which operate on content rather than connection state.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"Good first call to confirm the connection and understand what lineage depth to expect" gives explicit when-to-use guidance tied to a concrete downstream decision. It does not name an alternative or state exclusions, but the ordering advice is actionable and unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
where_usedARead-only
Find which workbooks (and published datasources) USE the given names, the common 'where is this used / impact analysis' question, resolved robustly.
`names` are EXACT, case-sensitive names of any of: a Snowflake/DB column, a Tableau
field or alias, or a database table. Pass several to check them in one call. Results
group by workbook, showing how each matched (column / field / whole table, with schema
and source table) and which worksheets use it.
This uses CORE lineage (referencedByFields -> field.sheets -> workbook, and
field.datasource -> workbook), so it works even without the Data Management add-on where
`downstreamWorkbooks` is empty. For other shapes of question, use `graphql_query`.
| Name | Required | Description | Default |
|---|---|---|---|
| names | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so safety is covered. The description adds real behavioral context beyond that: it explains the underlying CORE lineage path (referencedByFields -> field.sheets -> workbook) and notes it works even without the Data Management add-on where downstreamWorkbooks is empty, which is non-obvious operational detail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core answer, then parameters, then mechanism, then alternative routing. The lineage explanation sentence is dense but earns its place by justifying the tool's robustness claim; slightly longer than strictly needed.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be spelled out, and the description still sketches result grouping (by workbook, match type, worksheets) for orientation. Combined with the parameter detail and alternative routing, an agent has what it needs to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description carries the full burden and does so: `names` are EXACT, case-sensitive, and may be a Snowflake/DB column, a Tableau field or alias, or a database table, with several accepted in one call. This fully specifies input semantics the bare array schema omits.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Find which workbooks and published datasources USE the given names') and frames the exact question it answers. It names graphql_query as the escape hatch for other question shapes, but does not differentiate itself from the sibling impact_analysis, which covers an adjacent-sounding 'impact analysis' question.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use it (the 'where is this used' question), that multiple names can be checked in one call, and redirects other question shapes to graphql_query. No exclusion is drawn against impact_analysis, so the routing advice is clear but not exhaustive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v0.1.0- First observed
graphql_query - First observed
impact_analysis - First observed
introspect_schema - First observed
lineage_examples - First observed
search_content - First observed
server_info - First observed
where_used
TDQS
Scored across 7 tools
The tools are mostly distinct: graphql_query is a general-purpose escape hatch, while where_used and impact_analysis are specialized lineage tools with clearly differentiated one-hop versus transitive semantics. Some overlap remains because graphql_query can answer nearly any lineage question, but the descriptions give clear selection guidance.
All names use snake_case, which is readable and consistent at the casing level. However, the set mixes verb_noun names like introspect_schema and search_content with noun-phrase names like lineage_examples, impact_analysis, where_used, and server_info, so there is no predictable action-oriented pattern throughout.
Seven tools is well-scoped for a read-only Tableau Metadata GraphQL server. The set provides a general query tool plus targeted helpers without excessive fragmentation.
The surface covers the important read-only metadata workflows: arbitrary GraphQL querying, schema introspection, examples, content search, direct usage lookup, transitive impact analysis, and environment info. Minor gaps are acceptable because graphql_query can handle less common shapes, though agents must compose those queries themselves.
Maintenance
Related MCP Connectors
Governed data discovery, exact queries, decisions, simulations, and runtime utilities over MCP.
Query your org's data in natural language — read-only MCP access to SQL, NoSQL, files & warehouses.
Governed BI MCP. Ask questions of live company data and list workspace sources via OAuth.
One governed MCP endpoint for 40+ business systems. Read-only, source-cited answers.
Related MCP Servers
- FlicenseNot gradedqualityBmaintenanceProvides MCP tools to query Tableau Server/Cloud datasources via REST API and VizQL Data Service, with support for Gemini or OpenAI as the LLM backend. Enables a natural language chat interface that can be embedded in Tableau dashboards, automatically including dashboard filter context.-
- AlicenseNot gradedqualityBmaintenanceProvides read-only, guarded access to business databases via MCP. Enables natural language querying with built-in security barriers like table allowlists, PII masking, and audit logging.MIT
- AlicenseAqualityBmaintenanceEnables agents to query governed metrics through MCP, including describing metrics, running deterministic SQL against a warehouse, explaining join path preferences, and searching semantically ambiguous terms.8MIT
- AlicenseNot gradedqualityCmaintenanceEnables MCP clients to ask bilingual data questions, inspect database tables and schemas, and execute validated read-only SQL through exposed tools.MIT