Skip to main content
Glama
tableau-graphql-mcp

tableau-graphql-mcp

by tdries

tableau-graphql-mcp turns your Tableau site's Metadata API into a set of MCP tools, so an AI assistant (Claude, Cursor, Cline, and others) can answer lineage questions in plain language:

  • "If I drop the column SALES, which workbooks break?"

  • "What tables does the Sales Overview workbook depend on?"

  • "Which calculated fields reference Profit, and on which dashboards?"

  • "Who should I notify before changing the DIM_CUSTOMER table?"

It ships seven curated tools: a universal GraphQL passthrough, live schema introspection, an embedded library of correct query templates, a robust where_used resolver, a multi-hop impact_analysis, a substring content search, and a connection probe. Together they let the model answer any lineage question, not just a fixed menu.

Why it's different

  • Any question, done right. graphql_query runs any read-only GraphQL; introspect_schema and a built-in cheat-sheet plus 28 worked examples keep the model's queries correct.

  • True impact analysis (multi-hop). impact_analysis follows the whole dependency chain (a calc built on a calc built on a column is included) and returns the full blast radius plus the de-duplicated owners to notify, not just direct references.

  • Works everywhere. Tableau Server and Cloud. The REST API version and the GraphQL endpoint (/api/metadata/graphql, with a /relationship-service-war/graphql fallback) are auto-detected.

  • Robust lineage without Catalog. where_used resolves workbooks via core lineage (referencedByFields -> sheets -> workbook), so it works even when the Data Management add-on's downstreamWorkbooks is empty.

  • No silent truncation. graphql_query flags partial_results when a query hits the node limit, and search_content reports scanned/total coverage, so a truncated answer is never mistaken for a complete one.

  • Tiny and safe. Read-only, stdio-only (no inbound port), secrets from env only, and no dependencies beyond the MCP SDK (stdlib urllib for HTTP).

Quickstart

You need uv (curl -LsSf https://astral.sh/uv/install.sh | sh) and a Tableau Personal Access Token.

Claude Code, one line:

claude mcp add tableau-graphql \
  -e TABLEAU_SERVER=https://10ax.online.tableau.com \
  -e TABLEAU_SITE_CONTENT_URL=YourSite \
  -e TABLEAU_PAT_NAME=my-token \
  -e TABLEAU_PAT_SECRET=the-full-secret \
  -- uvx tableau-graphql-mcp

That's all. uvx fetches the package from PyPI and runs it in an isolated environment; nothing to clone or install (and no git required). Then ask Claude a lineage question.

Related MCP server: mcp-data-server

Configuration

All configuration is via environment variables (set them in your client's env block, never on the command line).

Env var

Required

Default

Description

TABLEAU_SERVER

yes

n/a

https://tableau.company.com (Server) or https://<pod>.online.tableau.com (Cloud).

TABLEAU_SITE_CONTENT_URL

no

""

Site slug (the part after /#/site/). Empty = Default site (Server only); Cloud always has one.

TABLEAU_PAT_NAME

yes¹

n/a

Personal Access Token name.

TABLEAU_PAT_SECRET

yes¹

n/a

PAT secret: the whole string, do not split on :.

TABLEAU_TIMEOUT

no

60

Per-request timeout (seconds).

TABLEAU_API_VERSION

no

auto

REST API version; else read from /api/serverinfo.

TABLEAU_METADATA_PATH

no

auto

Override the GraphQL path; else auto-detected.

TABLEAU_ALLOW_HTTP

no

off

Set to 1 to allow a plain http:// server on a trusted internal network. Otherwise only HTTPS (or loopback) is accepted, so credentials never travel unencrypted.

TABLEAU_LOG_LEVEL

no

INFO

DEBUG logs each HTTP call (method + URL; never headers, bodies or secrets) to stderr.

TABLEAU_AUTH_TOKEN

no

n/a

Advanced: a pre-obtained X-Tableau-Auth token (SSO tenants where PATs are disabled).

TABLEAU_COOKIE

no

n/a

Advanced: a browser session cookie (SSO fallback).

¹ Provide a PAT (TABLEAU_PAT_NAME + TABLEAU_PAT_SECRET) or an advanced TABLEAU_AUTH_TOKEN / TABLEAU_COOKIE.

Edit claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\):

{
  "mcpServers": {
    "tableau-graphql": {
      "command": "uvx",
      "args": ["tableau-graphql-mcp"],
      "env": {
        "TABLEAU_SERVER": "https://10ax.online.tableau.com",
        "TABLEAU_SITE_CONTENT_URL": "YourSite",
        "TABLEAU_PAT_NAME": "my-token",
        "TABLEAU_PAT_SECRET": "the-full-secret"
      }
    }
  }
}

Fully quit and reopen Claude Desktop, then check the tools menu.

Every client uses the same mcpServers schema shown above. Add the same block to:

  • Cursor: ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

  • Cline: the MCP Servers panel, then Configure, into cline_mcp_settings.json.

  • Windsurf: ~/.codeium/windsurf/mcp_config.json.

On Windows, if uvx isn't found by the GUI app, use its absolute path (e.g. %USERPROFILE%\.local\bin\uvx.exe).

Tools

Tool

What it does

Key args

graphql_query

Run any read-only Metadata API GraphQL query. The general tool for any lineage question.

query, variables

introspect_schema

Live schema introspection: list entry points, or a type's exact fields.

type_name

lineage_examples

A schema cheat-sheet plus 28 curated question-to-GraphQL templates (8 categories).

category

where_used

Which workbooks/datasources use given column / field / table names (robust one-hop core-lineage resolution).

names

impact_analysis

Full transitive multi-hop blast radius of a column/field/table: every dependent field, plus affected sheets, dashboards, workbooks, and owners to notify.

name

search_content

Find content whose name contains a term (case-insensitive substring), across workbooks, datasources, tables (and optionally fields/columns), with coverage numbers.

term, types

server_info

Connected server, site, versions, endpoint, auth, and whether Catalog lineage is available.

none

All tools are read-only. The Metadata API has no mutations.

Example prompts

Once connected, try:

  • "Use server_info to confirm what you're connected to."

  • "Search for anything with 'revenue' in the name."

  • "Which workbooks use the columns SALES, PROFIT and DISCOUNT? Group by owner."

  • "Show me the field-to-source-column map for the 'Sales Overview' workbook."

  • "List every calculated field in that workbook with its formula."

  • "Which published datasources feed workbooks in the Analytics project, and which are uncertified?"

  • "Run impact_analysis on the 'Profit Ratio' field: every dependent sheet, dashboard, workbook, and owner to notify."

  • "What is the blast radius of dropping the DIM_CUSTOMER table: workbooks, sheets, and owners to notify?"

Architecture

The server speaks MCP over stdio to the client and HTTPS to Tableau: it signs in with your PAT to get an X-Tableau-Auth token (auto-refreshed on expiry), auto-detects the REST API version and the GraphQL endpoint, then forwards queries to the Metadata API. Nothing is stored; every answer is live.

Security

  • Read-only, enforced. Only GraphQL queries: no writes, no shell. graphql_query rejects mutation/subscription operations, and the Metadata API is query-only regardless.

  • Declared read-only. Every tool carries the MCP readOnlyHint annotation, so clients can verify it without reading the code.

  • Local and stdio-only. No inbound network port is opened.

  • Secrets from env only. Never passed as tool arguments, never logged, never returned in output.

  • Credentials go only to your Tableau host. HTTPS is required, certificates are verified, and redirects are refused.

  • Least privilege. The PAT inherits your Tableau permissions; the API only returns content you can see.

  • Verifiable releases. Every GitHub release carries Sigstore signatures and a CycloneDX SBOM, and PyPI uploads use Trusted Publishing.

  • Pin a version in production: uvx tableau-graphql-mcp==0.2.0.

See SECURITY.md for the threat model, data handling, disclosure policy and how to verify a release.

Troubleshooting

Symptom

Fix

Server doesn't appear

Fully quit and relaunch the client; check the config path and JSON validity.

spawn uvx ENOENT

Install uv, or use the absolute path to uvx.

Sign-in fails (401)

Check the PAT name/secret and TABLEAU_SITE_CONTENT_URL. On SSO tenants PATs may be disabled; use TABLEAU_AUTH_TOKEN/TABLEAU_COOKIE.

"Could not reach the Metadata API"

On Tableau Server, an admin must enable it: tsm maintenance metadata-services enable. On Cloud it is always on.

Empty downstreamWorkbooks

Expected without the Data Management add-on; use the where_used tool, which resolves via core lineage.

Inspect the server directly with the MCP Inspector:

npx @modelcontextprotocol/inspector uvx tableau-graphql-mcp

Development

git clone https://github.com/tdries/tableau-graphQL-mcp && cd tableau-graphQL-mcp
uv sync --all-extras
uv run tableau-graphql-mcp                     # run from source
uv run pytest --cov=tableau_graphql_mcp        # tests + coverage (offline; no Tableau needed)
uv run ruff check .                            # lint
uv run ruff format --check .                   # format

The same gates run in CI (Linux/macOS/Windows, Python 3.10 to 3.13): ruff check, ruff format --check, mypy --strict, and pytest with a coverage floor. The package ships a PEP 561 py.typed marker, so importing it gives your type checker full types. CodeQL scans every push, and a weekly fuzzing job (fuzz/) attacks the read-only guard.

Contributions welcome: see CONTRIBUTING.md and the Code of Conduct.

Roadmap

Shipped: published on PyPI and listed on the official MCP registry. Next:

  • Optional Data Management path: richer downstreamWorkbooks when Catalog is present

  • More curated query templates in lineage_examples

  • Optional response caching for repeated introspection within a session

Ideas and votes welcome in Discussions.

License

MIT © Tim Dries. Built at Biztory.

Available Tools

7 tools
graphql_queryA
Read-only

Run ANY read-only GraphQL query against the Tableau Metadata API. This is the general-purpose tool; use it for any lineage question. Returns {"data": ..., "errors": ...}.

The Metadata API is a GraphQL graph of Tableau content (workbooks, sheets, dashboards,
datasources, fields) and, with the Data Management add-on, physical assets (databases,
tables, columns) and their upstream/downstream lineage.

How to write a correct query:
- Filters are EXACT and case-sensitive: `filter: {name: "X"}` or `filter: {nameWithin: ["X","Y"]}`
  (nameWithin is the only multi/OR match; there is NO substring or regex).
- Every list field has a `<name>Connection` variant with `first`/`offset`/`after` + `pageInfo`
  (page size max 1000). Keep one query under ~20,000 nodes; narrow filters and page.
- Fields is an interface; branch with `__typename` and inline fragments
  (`... on ColumnField { columns { name } }`, `... on CalculatedField { formula }`).
- Reach a field's owning workbook via `datasource { ... on EmbeddedDatasource { workbook { name } } }`.
- `downstream*` fields (downstreamWorkbooks/Owners, external tables/columns) need Data Management
  (Tableau Catalog) and are often empty otherwise; then resolve via core lineage
  (referencedByFields -> sheets -> workbook), or just call the `where_used` tool.

Entry points include: workbooks, sheets, dashboards, publishedDatasources, embeddedDatasources,
fields, columnFields, calculatedFields, columns, databaseTables, customSQLTables, databases,
flows, tableauUsers, dataQualityWarnings. Call `lineage_examples` for ready-made query templates
and a schema cheat-sheet, or `introspect_schema` to inspect any type's exact fields.

Read-only: mutation and subscription operations are rejected. If a query exceeds the
~20,000-node limit, the response is flagged with `partial_results: true` and a `warning`
(it does NOT auto-page an arbitrary query) so you never mistake a truncated result for a
complete one.
NameRequiredDescriptionDefault
queryYes
variablesNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark it read-only and non-destructive, and the description adds important operational behavior: exact case-sensitive filters, no substring/regex, page size max 1000, an approximate 20,000-node limit, partial_results warnings, and no auto-paging of arbitrary queries. These are substantive details beyond the structured annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but well structured and front-loaded: the purpose and return shape come first, followed by concrete query-writing rules and alternatives. Every section provides useful guidance for a complex GraphQL tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex open-world GraphQL tool, the description covers API scope, query syntax constraints, pagination, result truncation behavior, read-only restrictions, and sibling alternatives. An output schema exists, so return-value explanation is not required.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry parameter meaning. It explains query construction in detail, including filters, pagination, fragments, and entry points, but does not explain the optional variables parameter at all, leaving one parameter undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: run ANY read-only GraphQL query against the Tableau Metadata API. It explicitly calls itself the general-purpose tool for lineage questions and distinguishes itself from introspect_schema and lineage_examples.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit usage guidance: use this for any lineage question, call lineage_examples for templates and introspect_schema for schema inspection, and use where_used when Catalog lineage is unavailable. It also states mutation and subscription operations are rejected.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

impact_analysisA
Read-only

Full transitive (MULTI-HOP) downstream impact of a column, field, or table. Returns every field that directly OR indirectly depends on it, and all affected sheets, dashboards, workbooks, plus the de-duplicated set of OWNERS to notify before a change.

This is the "what breaks if I change/drop this?" tool. Unlike `where_used` (one core-lineage
hop), it follows the whole dependency chain — a calc built on a calc built on the column is
included. `name` is exact and case-sensitive. Workbooks are derived from downstream
sheets/dashboards (the flat downstreamWorkbooks edge is unreliable). If it returns nothing on a
site without Data Management, the transitive lineage may not be indexed there — use `where_used`
for the direct references.
NameRequiredDescriptionDefault
nameYes

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/openWorld annotations, the description discloses non-obvious traits: `name` is exact and case-sensitive, workbooks are derived from downstream sheets/dashboards because the flat downstreamWorkbooks edge is unreliable, and an empty result on a site without Data Management signals unindexed transitive lineage. These are exactly the operational caveats annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core capability, then the routing contrast, then operational caveats — a deliberate and useful ordering. It runs slightly long with the parenthetical asides, but every sentence carries distinct information rather than restating the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although an output schema exists (so return values need not be explained), the description voluntarily enumerates the return shape (dependent fields, sheets, dashboards, workbooks, de-duplicated owners) and covers the critical failure mode. Nothing an agent needs to invoke or interpret this tool is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With one parameter at 0% schema description coverage, the description must compensate, and it does: it tells the agent the argument accepts a column, field, or table and must match exactly and case-sensitively. It could still be clearer about naming conventions for non-column targets, but the key semantic is covered.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('transitive MULTI-HOP downstream impact of a column, field, or table') and immediately distinguishes itself from the sibling `where_used` (one-hop core lineage). An agent can select between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use case ('what breaks if I change/drop this?'), names the alternative `where_used` and the exact condition that selects it, plus a documented fallback when the tool returns nothing. Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

introspect_schemaA
Read-only

Introspect the live Metadata API GraphQL schema (introspection is enabled).

With no argument: returns every Query entry point (with its args) and the full list of
type names. With `type_name` (e.g. "Column", "Workbook", "DatabaseTable", "CalculatedField"):
returns that type's fields, their result types, and args, so you can write a correct query
against exactly what this server exposes.
NameRequiredDescriptionDefault
type_nameNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover safety (readOnlyHint=true, destructiveHint=false, openWorldHint=true). The description adds real context beyond them: that introspection is enabled on this server, and what each invocation mode returns. It does not discuss error behavior for an invalid type name.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the action and its scope, then splits cleanly into the no-arg and type_name cases. Every sentence carries information; nothing is padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and annotations covering safety, the description only needs to explain modes and the parameter, which it does. The one notable omission is any hint about failure behavior for a nonexistent type name.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry the parameter — and it does, explaining that `type_name` is optional, what happens when omitted, and giving concrete example values ("Column", "Workbook", "DatabaseTable", "CalculatedField"). Case sensitivity and invalid-value handling are left unstated.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource: "Introspect the live Metadata API GraphQL schema" names exactly what is being inspected and what the two modes yield. It does not name a sibling (e.g. graphql_query) explicitly, so the differentiation is only implicit, which keeps it out of the top band.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly states the two usage contexts — no argument for entry points/type names, `type_name` for a specific type's fields — and frames the purpose as "so you can write a correct query." It gives no explicit when-not or named alternative, so it stops short of 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lineage_examplesA
Read-only

Return a schema cheat-sheet and a library of curated lineage questions with their correct GraphQL queries (+ example variables). Read this before composing a graphql_query.

Categories: impact, provenance, calc, datasource, search, inventory, governance, ownership.
Pass one to filter; omit to get them all. Each example has: question, graphql, variables, notes.
NameRequiredDescriptionDefault
categoryNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds value beyond that by disclosing the returned payload's shape (question, graphql, variables, notes) and the optional category filter semantics. It doesn't note rate limits or auth needs, but those are largely irrelevant for a static read tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the key instruction ('Read this before composing a graphql_query'), then the category list, then filter behavior, then the return shape. Every sentence earns its place and there is no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be exhaustively described, yet the description summarizes the example fields. Combined with the enumerated categories and the when-to-use routing, an agent has everything needed to invoke this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the single `category` parameter is a bare string with no enum, so the schema gives an agent nothing. The description compensates fully by enumerating all eight valid values (impact, provenance, calc, datasource, search, inventory, governance, ownership) and explaining default behavior when omitted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: returns a schema cheat-sheet plus a library of curated lineage questions with their correct GraphQL queries and example variables. This is clearly distinguishable from siblings like graphql_query and introspect_schema, which perform queries rather than supply ready-made examples.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit timing guidance tied to a sibling: 'Read this before composing a `graphql_query`.' It also explains the filter behavior ('Pass one to filter; omit to get them all'). However, it never states when not to use it or lists alternative sibling tools for adjacent tasks.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_contentA
Read-only

Find content whose NAME contains term (case-insensitive SUBSTRING). Use this when you only know part of a name, since every other tool and the Metadata API filter are exact-match.

Searches workbooks, published datasources, and database tables by default. Pass `types` to
choose from: "workbook", "datasource", "table", "field", "column". Returns matches grouped by
type. It pages through content client-side, so on a very large site it scans the first ~1200
of each type and says so in `note`; once you know the exact name, prefer `graphql_query` or `where_used`.
NameRequiredDescriptionDefault
termYes
typesNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true and destructiveHint=false, so the safety profile is covered. The description adds genuinely new behavioral context beyond them: it searches workbooks, published datasources and tables by default, groups results by type, pages client-side, scans only the first ~1200 of each type, and flags that truncation in a `note` field. Auth/rate-limit details are absent, but the pagination cap is a real disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the matching semantics before usage routing and the paging caveat. Every clause carries information an agent needs; no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be explained, and the description still notes grouping and the `note` truncation field. Matching semantics, scope, parameter values, and the paging limit together leave nothing an agent needs to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and both properties carry only bare titles ('Term', 'Types'), so the description must compensate — and it does. It defines `term` as a case-insensitive substring match on name, and enumerates the `types` values ('workbook', 'datasource', 'table', 'field', 'column') plus the default search scope.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource — find content whose NAME contains a substring — and immediately scopes it against siblings by noting that every other tool and the Metadata API filter are exact-match. An agent can distinguish it from graphql_query and where_used without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit when-to-use ('when you only know part of a name') and when-not ('once you know the exact name, prefer graphql_query or where_used'), naming the alternatives. Nothing about tool selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

server_infoA
Read-only

Report the connected Tableau environment: server URL, site, product & REST API version, which Metadata API endpoint is in use, the auth method, and whether external-asset (Data Management / Catalog) lineage appears available. Good first call to confirm the connection and understand what lineage depth to expect.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish this as a safe, read-only, open-world probe, so the description only needs to add context. It does: it discloses that the call inspects the live connection and even reports whether external-asset (Data Management/Catalog) lineage is available, which tells the agent how much depth to expect from lineage tooling. It omits any note about auth prereqs or failure behavior, keeping it short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the payload of returned fields and followed by the call-ordering advice. The field list is dense but each item is meaningful; there is no filler, though the enumeration is at the edge of being exhaustive for a description.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With a declared output schema, the description need not spell out return shape, and it doesn't need to — it instead supplies the interpretive layer (which fields matter, what lineage availability implies). For a zero-parameter diagnostic tool this is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so per the rubric the baseline is 4. The description correctly implies a no-argument diagnostic call and adds no misleading parameter guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb (report) plus resource (connected Tableau environment), and it enumerates the exact fields returned: server URL, site, product/REST API version, Metadata API endpoint, auth method, and lineage availability. This clearly separates it from the sibling lineage/query tools, which operate on content rather than connection state.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Good first call to confirm the connection and understand what lineage depth to expect" gives explicit when-to-use guidance tied to a concrete downstream decision. It does not name an alternative or state exclusions, but the ordering advice is actionable and unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

where_usedA
Read-only

Find which workbooks (and published datasources) USE the given names, the common 'where is this used / impact analysis' question, resolved robustly.

`names` are EXACT, case-sensitive names of any of: a Snowflake/DB column, a Tableau
field or alias, or a database table. Pass several to check them in one call. Results
group by workbook, showing how each matched (column / field / whole table, with schema
and source table) and which worksheets use it.

This uses CORE lineage (referencedByFields -> field.sheets -> workbook, and
field.datasource -> workbook), so it works even without the Data Management add-on where
`downstreamWorkbooks` is empty. For other shapes of question, use `graphql_query`.
NameRequiredDescriptionDefault
namesYes

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so safety is covered. The description adds real behavioral context beyond that: it explains the underlying CORE lineage path (referencedByFields -> field.sheets -> workbook) and notes it works even without the Data Management add-on where downstreamWorkbooks is empty, which is non-obvious operational detail.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core answer, then parameters, then mechanism, then alternative routing. The lineage explanation sentence is dense but earns its place by justifying the tool's robustness claim; slightly longer than strictly needed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be spelled out, and the description still sketches result grouping (by workbook, match type, worksheets) for orientation. Combined with the parameter detail and alternative routing, an agent has what it needs to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description carries the full burden and does so: `names` are EXACT, case-sensitive, and may be a Snowflake/DB column, a Tableau field or alias, or a database table, with several accepted in one call. This fully specifies input semantics the bare array schema omits.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Find which workbooks and published datasources USE the given names') and frames the exact question it answers. It names graphql_query as the escape hatch for other question shapes, but does not differentiate itself from the sibling impact_analysis, which covers an adjacent-sounding 'impact analysis' question.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it (the 'where is this used' question), that multiple names can be checked in one call, and redirects other question shapes to graphql_query. No exclusion is drawn against impact_analysis, so the routing advice is clear but not exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 7 tool updatesv0.1.0
    • First observedgraphql_query
    • First observedimpact_analysis
    • First observedintrospect_schema
    • First observedlineage_examples
    • First observedsearch_content
    • First observedserver_info
    • First observedwhere_used

TDQS

A4.2/5.0

Scored across 7 tools

Disambiguation4/5

The tools are mostly distinct: graphql_query is a general-purpose escape hatch, while where_used and impact_analysis are specialized lineage tools with clearly differentiated one-hop versus transitive semantics. Some overlap remains because graphql_query can answer nearly any lineage question, but the descriptions give clear selection guidance.

Naming Consistency3/5

All names use snake_case, which is readable and consistent at the casing level. However, the set mixes verb_noun names like introspect_schema and search_content with noun-phrase names like lineage_examples, impact_analysis, where_used, and server_info, so there is no predictable action-oriented pattern throughout.

Tool Count5/5

Seven tools is well-scoped for a read-only Tableau Metadata GraphQL server. The set provides a general query tool plus targeted helpers without excessive fragmentation.

Completeness4/5

The surface covers the important read-only metadata workflows: arbitrary GraphQL querying, schema introspection, examples, content search, direct usage lookup, transitive impact analysis, and environment info. Minor gaps are acceptable because graphql_query can handle less common shapes, though agents must compose those queries themselves.

Maintenance

ActivityMaintained
ResponsivenessSyncing

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    B
    maintenance
    Provides MCP tools to query Tableau Server/Cloud datasources via REST API and VizQL Data Service, with support for Gemini or OpenAI as the LLM backend. Enables a natural language chat interface that can be embedded in Tableau dashboards, automatically including dashboard filter context.
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Provides read-only, guarded access to business databases via MCP. Enables natural language querying with built-in security barriers like table allowlists, PII masking, and audit logging.
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables agents to query governed metrics through MCP, including describing metrics, running deterministic SQL against a warehouse, explaining join path preferences, and searching semantically ambiguous terms.
    8
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP clients to ask bilingual data questions, inspect database tables and schemas, and execute validated read-only SQL through exposed tools.
    MIT