Agent access · Context and connections
Which BI tools document how agents authenticate?
14 of 15 tools do, according to their public docs.
Yes: Databricks, Snowflake, Omni, Hex, Sigma, BigQuery, Looker, Tableau, Power BI, Metabase, Alteryx, MotherDuck, Mode, Redshift.
The question we asked: Does the vendor document how an outside agent authenticates, a service account, a token, or acting on behalf of a user?
Grading standard
A named credential type for programmatic access. Whose permissions apply is a different row; this is how the agent gets in at all.
Databricks
Yes
Quoted from Databricks’s docsThis token identifies the Databricks user or Databricks service principal making the request.
Source: docs.databricks.com/aws/en/agents/mcp-tools/authentication-networking · checked Oct 26, 2026 · quoted by Gemini
Snowflake
Yes
Quoted from Snowflake’s docsAutonomous agents act under their own identity and authorization. Create a SERVICE_AGENT user and authenticate with workload identity federation or another supported non-interactive method. Every session for that user is agent-active.
Source: docs.snowflake.com/en/user-guide/agent-identity · checked Oct 26, 2026 · quoted by GPT
Omni
Yes
Quoted from Omni’s docsAfter authorization, all MCP queries use your Omni permissions and access controls.
Source: docs.omni.co/ai/mcp/authentication · checked Oct 26, 2026 · quoted by Gemini
Hex
Yes
Quoted from Hex’s docsThere are two types of tokens users can create: Personal access tokens and Workspace tokens.
Source: learn.hex.tech/docs/api-integrations/api/overview · checked Oct 26, 2026 · quoted by Claude
Sigma
Yes
Quoted from Sigma’s docsThe Sigma MCP server authenticates to Sigma using OAuth.
Source: help.sigmacomputing.com/docs/use-sigma-mcp-server · checked Oct 26, 2026 · quoted by Claude
BigQuery
Yes
Quoted from BigQuery’s docsAuthentication details: depending on how you want to authenticate, you can enter your Google Cloud credentials, your OAuth Client ID and secret, or an agent identity and credentials.
Source: docs.cloud.google.com/bigquery/docs/use-bigquery-mcp · checked Oct 26, 2026 · quoted by Claude
Looker
Yespreview
Quoted from Looker’s docsTo connect an AI agent to the Looker-managed MCP server: you need your standard Looker login credentials to authenticate during the OAuth connection process.
Source: cloud.google.com/looker/docs/mcp · checked Oct 26, 2026 · quoted by Gemini
Tableau
Yes
Quoted from Tableau’s docsTo get a credentials token, you call Sign In and pass credentials of a valid user, either a Personal Access Token (PAT), a user name and password, along with the content URL (subpath) of the site you are signing in to.
Source: help.tableau.com/current/api/rest_api/en-us/REST/rest_api_concepts_auth.htm · checked Oct 26, 2026 · quoted by Claude
Power BI
Yes
Quoted from Power BI’s docsUse more flexible authentication methods, such as a service principal in a continuous integration (CI) pipeline.
Source: learn.microsoft.com/en-us/power-bi/developer/mcp/power-bi-authoring-mcp · checked Oct 26, 2026 · quoted by Claude
Metabase
Yes
Quoted from Metabase’s docsLog in with a Metabase username and password to get a session token, then pass it in subsequent requests.
Source: www.metabase.com/docs/latest/ai/agent-api · checked Oct 26, 2026 · quoted by GPT
Alteryx
Yes
Quoted from Alteryx’s docsThe MCP Server uses OAuth 2.0 with PKCE for authentication.
Source: help.alteryx.com/aac/en/agent-studio/alteryx-mcp-server.html · checked Oct 26, 2026 · quoted by Claude
MotherDuck
Yes
Quoted from MotherDuck’s docsBackend MCP clients can authenticate to https://api.motherduck.com/mcp with an Authorization: Bearer <motherduck_token> header.
Source: motherduck.com/docs/sql-reference/mcp · checked Oct 26, 2026 · quoted by Claude
Mode
Yes
Quoted from Mode’s docsAn API token is used instead of your email address and account password whenever you programmatically authenticate to Mode with basic authentication.
Source: mode.com/help/articles/api-reference · checked Oct 26, 2026 · quoted by GPT
Redshift
Yes
Quoted from Redshift’s docsThe Data API can use either credentials stored in AWS Secrets Manager or temporary database credentials.
Source: docs.aws.amazon.com/redshift/latest/mgmt/data-api.html · checked Oct 26, 2026 · quoted by Claude
Streamlit