Agent access · Reliability and controls
Which BI tools let admins block outside agents?
6 of 15 tools do, according to their public docs, and 7 partly.
Yes: Databricks, Snowflake, Sigma, BigQuery, Metabase, Alteryx. Partly: Omni, Hex, Looker, Tableau, Power BI, Mode, Redshift.
The question we asked: Can an administrator allow or block outside-agent access for particular users, groups or workspaces?
Grading standard
A documented admin control over agent or MCP access, separate from ordinary user permissions. An account-wide on/off is partly.
Databricks
Yes
Quoted from Databricks’s docsYou can govern who invokes them with grants and govern individual calls with policies.
Source: docs.databricks.com/aws/en/agents/mcp-tools/built-in-mcp-services · checked Oct 26, 2026 · quoted by Claude
Snowflake
Yes
Quoted from Snowflake’s docsAdmin-managed RSS: An administrator sets AGENT_RESTRICTED_SESSION_SCOPE on a session policy, then attaches that policy to the account or to specific users. The ceiling applies whenever an agent is active for users covered by the policy.
Source: docs.snowflake.com/en/user-guide/restricted-session-scope · checked Oct 26, 2026 · quoted by GPT
Omni
Partly
Quoted from Omni’s docsControls whether users can authorize external AI tools (like Claude Desktop, ChatGPT, or Cursor) to connect to Omni via the MCP Server.
Source: docs.omni.co/ai/settings/mcp · checked Oct 26, 2026 · quoted by Claude
Hex
Partly
Quoted from Hex’s docsTurning off API access for the workspace, or revoking it for an individual user, does not disable MCP access.
Source: learn.hex.tech/docs/api-integrations/mcp-server · checked Oct 26, 2026 · quoted by Claude
Sigma
Yes
Quoted from Sigma’s docsYou must be assigned a Sigma account type with the Use Sigma MCP with OAuth permission enabled.
Source: help.sigmacomputing.com/docs/use-sigma-mcp-server · checked Oct 26, 2026 · quoted by Claude
BigQuery
Yes
Quoted from BigQuery’s docsIdentity and Access Management (IAM) deny policies and allow policies help you secure Google Cloud and Google MCP servers.
Source: docs.cloud.google.com/bigquery/docs/use-bigquery-mcp · checked Oct 26, 2026 · quoted by Gemini
Looker
Partlypreview
Quoted from Looker’s docsWhen the Enable all tools toggle is switched to OFF, the tools on the Model Context Protocol (MCP) page can be individually enabled or disabled, allowing Looker admins to control which tools are available to AI agents.
Source: cloud.google.com/looker/docs/admin-panel-platform-mcp · checked Oct 26, 2026 · quoted by GPT
Tableau
Partly
Quoted from Tableau’s docsReplaces the current list of Tableau MCP settings for a given site.
Source: help.tableau.com/current/api/rest_api/en-us/REST/rest_api_ref_tableau_mcp.htm · checked Oct 26, 2026 · quoted by GPT
Power BI
Partlypreview
Quoted from Power BI’s docsYour Power BI admin must enable the tenant setting Users can use the Power BI Model Context Protocol server endpoint (preview).
Source: learn.microsoft.com/en-us/power-bi/developer/mcp/remote-mcp-server-external-clients · checked Oct 26, 2026 · quoted by Gemini
Metabase
Yes
Quoted from Metabase’s docsMCP tools access lets you choose which MCP server tools each group's AI clients can use.
Source: www.metabase.com/docs/latest/ai/usage-controls · checked Oct 26, 2026 · quoted by Claude
Alteryx
Yes
Quoted from Alteryx’s docsTo limit access to the Alteryx MCP Server for individual users, a Workspace Admin can assign users a custom role with the Alteryx MCP Server capability disabled.
Source: help.alteryx.com/aac/en/agent-studio/alteryx-mcp-server.html · checked Oct 26, 2026 · quoted by Claude
MotherDuck
Mode
Partly
Quoted from Mode’s docsTo enable the Member API tokens feature, Admins can navigate to your Workspace Settings > Features > API Keys > Member keys.
Source: mode.com/help/articles/api-tokens · checked Oct 26, 2026 · quoted by Claude
Redshift
Partly
Quoted from Redshift’s docsAs a best practice, we recommend attaching permissions policies to an IAM role and then assigning it to users and groups as needed.
Source: docs.aws.amazon.com/redshift/latest/mgmt/data-api-access.html · checked Oct 26, 2026 · quoted by Gemini
Streamlit