{
  "schemaVersion": 1,
  "methodology": "https://ionbin.com/interfaces/methodology/#evaluations",
  "evaluation": {
    "id": "metabase-mcp",
    "testedOn": "2026-10-18",
    "coverage": "unavailable",
    "summary": "Not checkable: the MCP endpoint belongs to a specific Metabase instance that an admin must turn on, so nothing was contacted.",
    "identity": {
      "version": "Not observed",
      "target": "https://<your-metabase>/api/metabase-mcp (per-instance endpoint; not contacted)",
      "integrity": "Not available: no endpoint or artifact was contacted for this record."
    },
    "environment": [
      "No account, instance or credentials available to IonBin for this product; nothing was contacted.",
      "Recorded October 18, 2026."
    ],
    "checks": [
      {
        "id": "metabase-mcp-initialize",
        "name": "Credential-free initialization",
        "method": "POST https://<your-metabase>/api/metabase-mcp without credentials.",
        "expected": "An unauthenticated request is rejected with OAuth discovery.",
        "observed": "Not run: the endpoint exists only on a specific Metabase instance with the MCP server turned on, and IonBin has no such instance, so there was no endpoint to contact.",
        "outcome": "blocked"
      }
    ],
    "findings": [
      {
        "title": "Not checkable without an instance",
        "basis": "documented",
        "severity": "informational",
        "detail": "Metabase documents the endpoint as /api/metabase-mcp on each instance, available once an admin turns it on.",
        "practicalAdvice": "Try it on a test instance with non-production data before connecting your main one."
      },
      {
        "title": "Scopes separate reading, querying, SQL and editing",
        "basis": "documented",
        "severity": "informational",
        "detail": "Each tool needs one of agent:content:read, agent:content:write, agent:query:run, agent:sql:run or agent:delivery:write.",
        "practicalAdvice": "Approve read and query scopes for routine use; grant SQL and write scopes only when needed."
      }
    ],
    "caveats": [
      "Behavior is as documented by Metabase; none was observed.",
      "MCP analytics are documented for Pro and Enterprise plans."
    ],
    "notTested": [
      "Any request to a Metabase MCP endpoint: each one is part of a specific Metabase instance, and IonBin has no instance with the MCP server turned on.",
      "OAuth consent, permission scopes, query execution, content writes, MCP analytics and prompt-injection resistance."
    ],
    "sources": [
      {
        "label": "Official endpoint, OAuth and scopes",
        "url": "https://www.metabase.com/docs/latest/ai/mcp"
      }
    ],
    "reportUrl": "/interface-evaluations/metabase-mcp.json"
  }
}