← Back to search

@tableau/mcp-server

GitHub Actions Scanned 28d ago

Helping agents see and understand data.

npm ↗
? Not scanned yet

Versions

4.0.4latest
Jul 29, 2026
3.6.3
Jul 29, 2026
3.6.0
Jul 24, 2026
3.0.0
Jul 15, 2026
2.24.0
Jul 8, 2026
+ show 35 moreshow less
2.22.0
Jul 7, 2026
2.21.1
Jul 2, 2026
2.18.1
Jun 24, 2026
2.18.0
Jun 23, 2026
2.9.3
Jun 12, 2026
2.7.4
Jun 9, 2026
2.2.4
May 14, 2026
2.1.0
May 12, 2026
2.0.0
May 8, 2026
1.18.5
Apr 16, 2026
1.18.2
Apr 16, 2026
1.18.1
Apr 3, 2026
1.17.19
Mar 24, 2026
1.17.18
Mar 21, 2026
1.17.12
Mar 7, 2026
1.17.11
Mar 5, 2026
1.17.8
Mar 4, 2026
1.15.0
Feb 12, 2026
1.14.5
Feb 5, 2026
1.14.4
Jan 30, 2026
1.13.10
Jan 8, 2026
1.13.9
Jan 5, 2026
1.13.7
Dec 12, 2025
1.13.4
Dec 10, 2025
1.13.3
Dec 10, 2025
1.13.2
Dec 10, 2025
1.13.1
Dec 4, 2025
1.12.4
Nov 26, 2025
1.12.0
Nov 11, 2025
1.10.3
Oct 28, 2025
1.10.2
Oct 23, 2025
1.9.3
Oct 15, 2025
1.9.1
Sep 29, 2025
1.8.6
Sep 19, 2025
1.8.1
Sep 16, 2025

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 45

high
Hardcoded OAuth client secret in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/authorizationCodeGrant.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/refreshTokenGrant.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/exchangeAuthzCodeForAccessToken.ts auth_checker · 95%
high
Hardcoded OAuth client ID in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/authorizationCodeFlow.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/clientCredentialsGrant.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-27p8-2357-5qqv) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-3px3-54cx-rmw9) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-4w3w-2rp5-g8jm) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-6gmq-8vp8-gcm6) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-6h8r-xr42-gp59) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-6mj3-qw4j-hgrw) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-8344-3jmq-59r6) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-93r5-fhx6-vmg9) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-965w-775f-mr7g) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-c7q8-3ch8-vqpv) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-g53g-w8rj-fmg7) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-vr34-hp96-76pp) dependency_analyzer · 95%
medium
Vulnerable dependency: @xmldom/xmldom@0.9.10 (GHSA-w2rr-34g9-rvrj) dependency_analyzer · 95%
medium
Vulnerable dependency: ssrfcheck@1.2.0 (GHSA-j4rj-2jr5-m439) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.1.3 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.1.3 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Buffer.from base64 in tableau-tableau-mcp-8cdc056/tests/e2e/views/getViewImage.test.ts:34 entropy_analyzer · 75%
medium
Buffer.from base64 in tableau-tableau-mcp-8cdc056/tests/e2e/views/getCustomViewImage.test.ts:34 entropy_analyzer · 75%
medium
Buffer.from base64 in tableau-tableau-mcp-8cdc056/src/server/oauth/token.ts:418 entropy_analyzer · 75%
medium
Buffer.from base64 in tableau-tableau-mcp-8cdc056/src/tools/web/views/getViewImage.test.ts:19 entropy_analyzer · 75%
medium
Buffer.from base64 in tableau-tableau-mcp-8cdc056/src/tools/web/views/getCustomViewImage.test.ts:19 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (29) manifest_parser · 80%
medium
Hardcoded OAuth client ID in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/authorizationCodeFlow.test.ts oauth_scope_analyzer · 80%
high
Deprecated implicit grant flow in tableau-tableau-mcp-8cdc056/tests/oauth/embedded-authz/authorizationCodeFlow.test.ts oauth_scope_analyzer · 85%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1870 components sbom_generator · 100%
critical
RSA Private Key found in tableau-tableau-mcp-8cdc056/docs/docs/enterprise/tableau-server.md secret_scanner · 95%
critical
RSA Private Key found in tableau-tableau-mcp-8cdc056/docs/docs/configuration/mcp-config/oauth.md secret_scanner · 95%
critical
RSA Private Key found in tableau-tableau-mcp-8cdc056/docs/docs/configuration/mcp-config/authentication/uat.md secret_scanner · 95%
high
Hardcoded Password found in tableau-tableau-mcp-8cdc056/src/logging/secretMask.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%