Back to Browse

Horizun Pbi MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Open-source MCP server for Power BI Desktop, DAX, PBIP, TMDL and PBIR automation.

About

Open-source MCP server for Power BI Desktop, DAX, PBIP, TMDL and PBIR automation.

Security Report

4.2
Use Caution4.2High Risk

This Power BI MCP server demonstrates solid security practices for a developer tool with appropriate local-first architecture and proper dependency management. However, several moderate-severity concerns exist: insufficient input validation in dynamic visual/report generation code, potential shell execution patterns without explicit safeguards, and overly broad exception handling that could mask security issues. The server's permissions (file I/O, network, subprocess) are appropriate for its purpose, but code quality issues around validation and error handling warrant attention before production use with untrusted inputs. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

4 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-horizungroup-horizun-pbi-mcp": {
      "args": [
        "horizun-pbi-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Horizun PBI MCP

CI PyPI Python License

Build and fix Power BI reports by describing what you want. Ask in plain language; the server runs the DAX, edits the model, writes the report pages — and checks its own work afterwards.

How it works

v2.1.0 · 139 tools · Windows · Python 3.10+ · Claude Code, Codex, any MCP client

New to the project? Start with what this Power BI MCP is, when to use it, and what it deliberately does not do.

Install

No repository clone, manual DLL download or .mcp.json editing is required. Pick the line that matches you.

Claude Code

claude plugin marketplace add HorizunGroup/horizun-pbi-mcp
claude plugin install horizun-pbi-mcp@horizun

Codex

codex plugin marketplace add HorizunGroup/horizun-pbi-mcp

Then open /plugins, pick the Horizun marketplace and install horizun-pbi-mcp.

Or just ask the agent — easiest of all

Paste this into Claude Code or Codex and let it install itself:

Install Horizun PBI MCP from HorizunGroup/horizun-pbi-mcp. Complete the runtime setup, watch pbi_install_status until it reports ready, restart the session, and confirm the 139 pbi_* tools are available.

A brand-new Windows PC

One paste in PowerShell installs the prerequisites first — version-pinned and SHA-256 verified, no administrator rights. See docs/INSTALL.md.

Finishing up

The first setup downloads the runtime and takes a few minutes. Run pbi_install_status until it says ready, then restart your client once so the tools load. If anything looks stuck, docs/INSTALL.md covers repair and offline installs.

Your first minute

  1. Open Power BI Desktop with any report.
  2. Ask: "List the Power BI models that are open and connect to the first one."
  3. Ask: "Run a read-only DAX query that returns revenue by month for this year."

If step 2 answers, everything works.

Things worth asking for

Audit this PBIP project and explain the highest-risk issues before changing anything.
This measure returns blank for December. Find out why.
Create a report page from this specification, validate it, and show me the layout.
Document every measure in the model and export it to Excel.

What it provides

AreaCapabilities
Live modelDiscover Desktop sessions, run DAX, inspect metadata, refresh, and manage measures through TOM
Semantic modelRead and edit TMDL tables, columns, measures, relationships, roles and calculation groups
Report authoringCreate pages and visuals, clone templates, arrange layouts, apply themes, bookmarks and interactions
ConversionConvert .pbix to .pbip, migrate supported structures and validate the result
QualityAudit models and reports, document schemas, detect broken references and normalize report structures
DeliveryExport verified PDF, Word, Excel and PowerPoint artifacts; ingest SharePoint data read-only

See the tool catalog for all 139 tools and their risk classifications.

Why it is safe to point at real work

  • Local-first: Power BI Desktop communication stays on localhost.
  • No telemetry, and the MCP server needs no account.
  • Project writes stay inside the active project directory.
  • Every project write makes a backup and is re-read to confirm it landed.
  • Destructive tools require confirm=true.
  • JSON writes are atomic; invalid JSON is never written over good JSON.
  • Downloaded runtime components are version-pinned and SHA-256 verified.
  • Logs go to stderr or files, so stdout stays a clean JSON-RPC channel.

Full guarantees and failure behavior: security model and recovery guide. Report vulnerabilities privately as described in SECURITY.md.

Requirements

  • Windows 10 or 11.
  • Python 3.10 or newer.
  • Power BI Desktop — only for the live layer (DAX, refresh, capture, render checks).
  • A .pbip project with PBIR enabled, for report-file authoring.
  • Node.js 20+ only for the optional Microsoft PBIR validator.

Claude Code, Codex and Power BI Desktop are external programs; this project does not install them. Without Desktop the .pbip tools still work — the live tools do not.

Known limits

  • Power BI does not expose pages or visuals through its live local endpoint, so those are edited in PBIR files while Desktop is safely closed.
  • mode="both" is disabled for dual live/disk writes: Desktop being open and a PBIP project being safe to edit are mutually exclusive states.
  • The server does not publish to or refresh the Power BI Service.
  • Three PBIR schemas referenced by Power BI are not published by Microsoft; affected writes fail closed instead of guessing.

Documentation

DocumentPurpose
InstallationSetup, repair, offline installation and MCP client registration
TutorialFirst connection through report authoring
Power BI MCP overviewUse cases, boundaries, safety and first workflow
Tool catalogAll tools, grouped by capability and risk
ArchitectureComponents, boundaries and invariants
SecurityThreat model and operational guarantees
ValidationTMDL/PBIR validation layers and known limits
Migration guideBreaking changes from 1.x to 2.0
ContributingDevelopment workflow and pull-request requirements

Development

git clone https://github.com/HorizunGroup/horizun-pbi-mcp.git
cd horizun-pbi-mcp
python -m pip install -e .
python scripts/fetch_libs.py
python scripts/fetch_pbir_schemas.py
python scripts/doctor.py

Before opening a pull request:

python -m pytest -q
python scripts/doctor.py
python -m tests.contract_utils

The MCP contract is frozen and checked against tests/golden/tools_v1.json. Real .pbix, .pbip, credentials, DLLs, outputs and backups are never committed. See AGENTS.md for the repository invariants.

License

Apache License 2.0. See LICENSE and NOTICE.

MCP Registry

This package is the one published under the server name below. The registry reads this line from the README of the PyPI package to confirm that whoever publishes the metadata also owns the package, so it has to live here rather than in .mcp/server.json alone.

mcp-name: io.github.HorizunGroup/horizun-pbi-mcp

Reviews

No reviews yet

Be the first to review this server!