dbt MCP (official)
Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology
- Install20/20
- Handshake30/30
- Maintenance25/25
- Docs5/15
- License10/10
Tested PyPI dbt-mcp 2.10.1 (Apache-2.0; repo dbt-labs/dbt-mcp, 620 GitHub stars when checked; server reports dbt 1.30.0). Stdio, 39 tools with no env set (product docs, Semantic Layer, Discovery, and Admin API job tools incl. trigger, cancel and retry job run). Real calls: search_product_docs for 'incremental models' and get_product_doc_pages for the incremental-models page returned content. list_metrics answered that DBT_HOST is required, so platform tools need a dbt host and token. Core tools not tested beyond docs; the job-run tools were not called. dbt's docs give 5,000 requests per minute per IP for the remote dbt MCP only, not this local server, so no rate limit is shown.
Tool-call test (2026-11-11, direct MCP stdio client, no LLM): partial. 2 of 3 read calls passed; Semantic Layer and platform tools need a dbt host and token. Evidence: local test run, Nov 11, 2026.
Transport (tested 2026-11-11): stdio
Token cost (estimate): approx. 18871 tokens, cl100k estimate (39 tools, measured 2026-11-11, version 2.10.1). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.
Permissions: 36 read, 3 write (state-changing), 0 unclassified · Auth: API key · Rate limit: unknown · Pricing unit: unknown
Auth: API key. Rate limit: unknown. Pricing unit: unknown.
cancel_job_run— write (state-changing)get_all_macros— readget_all_models— readget_all_sources— readget_dimension_values— readget_dimensions— readget_entities— readget_exposure_details— readget_exposures— readget_job_details— readget_job_run_artifacts— readget_job_run_details— readget_job_run_error— readget_lineage— readget_macro_details— readget_mart_models— readget_metrics_compiled_sql— readget_model_children— readget_model_details— readget_model_health— readget_model_parents— readget_model_performance— readget_node_details— readget_product_doc_pages— readget_seed_details— readget_semantic_model_details— readget_snapshot_details— readget_source_details— readget_test_details— readlist_job_run_artifacts— readlist_jobs— readlist_jobs_runs— readlist_metrics— readlist_projects— readlist_saved_queries— readquery_metrics— readretry_job_run— write (state-changing)search_product_docs— readtrigger_job_run— write (state-changing)
listing-flags calls_need_key or auth_kind
Score 90/100 · Tools 39 · Token cost approx. 18,871 tokens · Compare · Last tested 2026-11-11 · Version tested 2.10.1 · Package dbt-mcp · Repo dbt-labs/dbt-mcp
Summary: dbt MCP (official) completed an MCP handshake without credentials and exposed 39 tools.
Evidence summary
- Handshake
- pass
- Tools listed
- 39
- Context cost
- approx. 18871 tokens, cl100k estimate (39 tools, measured 2026-11-11, version 2.10.1; an estimate) ranking · add up your servers' context cost
- API key
- Connects without a key; tool calls need one
- Tested
- 2026-11-11
Test results
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | uv pip install dbt-mcp (Python venv, Linux) succeeded in 1s. |
| handshake | pass | 30 | MCP initialize + tools/list over stdio succeeded with no credentials; 39 tools listed in 2.9s. |
| maintenance | pass | 25 | Repo pushed 1 days before test; 620 GitHub stars. |
| docs | partial | 5 | README over 3,000 chars. Check of the package's own README (PyPI long_description (package README)). |
| license | pass | 10 | Apache Software License (OSI-approved). |
Local-model readiness
Token cost (estimate): approx. 18871 tokens, cl100k estimate for 39 tools · about 230% of an 8k context. This is an estimate from our testing (counted with cl100k_base).
Small-model friendly (schema heuristic, not a model result): unknown.
Not tested
Small-model task runs: Not yet tested.
What we tested and what we didn't
Tested on 2026-11-11
- Install from the registry
- We connected with no credentials and asked for its tool list: it listed 39 tools (Method details: MCP
initializethentools/list) - Maintenance signals (last push, archived/deprecated status)
- Docs (README length, install and config example)
- License (OSI-approved or not)
- Token cost (estimate)
Not tested
- Security: not audited (no code review, no permission or data-flow analysis)
- Real tasks (no functional task runs yet)
- Behaviour with real credentials or a real account
- Performance, rate limits or load
- Correctness of results beyond the listed tasks
Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.
Known security issues
Checked on 2026-11-11 for version 2.10.1 against OSV, GitHub advisories, GitHub repository advisories. Scope: the package itself; dependencies not scanned.
No published advisories found in OSV and GitHub advisories whose affected range includes dbt-mcp 2.10.1 as of 2026-11-11. This is not a security audit.
Other advisories we checked (5)
- Tested version 2.10.1 is not in the affected range of GHSA-xpww-f6pm-cfhq.
- Tested version 2.10.1 is not in the affected range of GHSA-7xgw-6qf3-7w59.
- Tested version 2.10.1 is not in the affected range of GHSA-jj54-r8gm-2fcf.
- Tested version 2.10.1 is not in the affected range of GHSA-jr33-mw75-7j8f.
- Tested version 2.10.1 is not in the affected range of GHSA-qgp5-9hvj-2pr7.
Monthly roundup: MCP security issues, October 2026.
Tool list changes
Baseline recorded from the 2026-11-11 test run; changes appear after the next test.
Snapshot hash (fingerprint of the tool list)
070ce9725043: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.
Raw test record (JSON)
{
"name": "dbt-mcp",
"version": "2.10.1",
"registry": "pypi",
"status": "working",
"tested": "2026-11-11",
"tools_count": 39,
"deprecated": false,
"archived": false,
"tests": {
"install": [
"pass",
20,
"`uv pip install dbt-mcp` (Python venv, Linux) succeeded in 1s."
],
"handshake": [
"pass",
30,
"MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 39 tools listed in 2.9s."
],
"maintenance": [
"pass",
25,
"Repo pushed 1 days before test; 620 GitHub stars."
],
"docs": [
"partial",
5,
"README over 3,000 chars. Check of the package's own README (PyPI long_description (package README))."
],
"license": [
"pass",
10,
"Apache Software License (OSI-approved)."
]
}
}Install
uvx dbt-mcp
Pin the version we tested
uvx dbt-mcp==2.10.1
pip install dbt-mcp==2.10.1
tested 2026-11-11. Newer versions may differ and were not tested by us.
{
"mcpServers": {
"dbt-mcp": {
"command": "uvx",
"args": [
"dbt-mcp==2.10.1"
]
}
}
}Tools listed
cancel_job_run, get_all_macros, get_all_models, get_all_sources, get_dimension_values, get_dimensions, get_entities, get_exposure_details, get_exposures, get_job_details, get_job_run_artifacts, get_job_run_details, get_job_run_error, get_lineage, get_macro_details, get_mart_models, get_metrics_compiled_sql, get_model_children, get_model_details, get_model_health, get_model_parents, get_model_performance, get_node_details, get_product_doc_pages, get_seed_details, get_semantic_model_details, get_snapshot_details, get_source_details, get_test_details, list_job_run_artifacts, list_jobs, list_jobs_runs, list_metrics, list_projects, list_saved_queries, query_metrics, retry_job_run, search_product_docs, trigger_job_run
Tool history: captured Nov 11, 2026. All tool history.
Quick config
{
"mcpServers": {
"dbt-mcp": {
"command": "uvx",
"args": [
"dbt-mcp"
]
}
}
}Add to config Opens the config generator with this server selected.
Setup
- Install. Run
uv pip install dbt-mcp(Python venv). This is the exact command we ran on 2026-11-11. - Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools (39 in our test).
{
"mcpServers": {
"dbt-mcp": {
"command": "uvx",
"args": [
"dbt-mcp"
]
}
}
}Test history
- 2026-11-11: New
Related: Best data and analytics MCP servers
FAQ
Is dbt MCP deprecated?
No. dbt-mcp was not deprecated or archived when we last tested it on 2026-11-11.
What replaces dbt MCP?
Nothing; dbt MCP (official) is not deprecated as of 2026-11-11.
Does dbt MCP need an API key?
It connects and lists 39 tools without a key, but its tool calls need one.
Embed the badge
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.