Hi there,
Welcome to the first issue of the DataAgentStack weekly. This is launch week: the site now lists 63 MCP servers and AI agents across the data stack, and 32 of them have been checked by hand against their docs. Each week I'll send you what's new, what's safe to connect, and what's changing.
Safety finds of the week
Power BI Modeling MCP (Microsoft): writes are on by default. It asks for confirmation once per database, and the --readonly flag blocks all writes. Read the review
mcp-snowflake-server (isaacwasserman, community): the opposite. It's read-only by default, and write_query/create_table only turn on with --allow-write. Read the review
Snowflake-managed MCP server: read-only is set per tool. The SQL tool (SYSTEM_EXECUTE_SQL) can be set to read_only: true. Read the review
Tableau MCP (hosted): the hosted version for Tableau Cloud uses OAuth 2.1 per-user sign-in, so each person connects as themselves. Read the review
Official servers to know
Snowflake-Labs mcp: self-run. It follows the permissions of the Snowflake role you connect with. Read the review
Fabric IQ MCP: Microsoft-hosted, with a read-only toolset per the docs. Read the review
ThoughtSpot MCP server: hosted or self-run, with OAuth sign-in. Read the review
dbt MCP: heads up, its README warns it can run dbt commands that modify models, sources and warehouse objects. Read the review
Heads up
Databricks' legacy /api/2.0/mcp/genie endpoint shuts down on Oct 31, 2026. If you're still pointing an agent at it, move to the Databricks managed MCP servers. Read the review
Your turn
Browse all the servers at dataagentstack.com/servers. Hit reply and tell me which servers you use, or which ones you want reviewed next.
Thanks,
Steve