Back to Home
HDieter6789 icon

powerbi-service-mcp-server

by HDieter6789

Overview

Provides a Micro-Context Protocol (MCP) server and HTTP API for automating Power BI operations, including REST API interactions and local PBIX/PBIT file transformations.

Installation

Run Command
docker compose up -d

Environment Variables

  • CLIENT_ID
  • TENANT_ID
  • API_KEY
  • PBI_AUTH_MODE
  • CLIENT_SECRET
  • PBI_TOOLS_PATH
  • PORT
  • PBI_SCOPE
  • CORS_ORIGINS
  • NODE_ENV
  • LOG_LEVEL
  • WORKDIR

Security Notes

CRITICAL: The server uses 'child_process.spawn' with 'shell: true' to execute 'pbi-tools'. User-controlled inputs for file paths (e.g., 'filePath', 'outDir', 'projectDir', 'outPath') are passed directly to these commands. This creates a severe command injection vulnerability if a malicious path containing shell commands is provided, potentially allowing arbitrary code execution on the host system. Additionally, the default CORS_ORIGINS is '*' which is risky for public deployments, and API key authentication uses a single shared key, which requires careful management.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassMedium
Stars0
Forks1
Last Update2025-12-11

Tags

Power BIPBIXPBITAPIMCP