You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
What's Changed
⚠️ Scope changes for hosted Tableau MCP
New scope to consent to: tableau:entitlements:read. It is now part of the advertised OAuth scope set. Registration-condition checks now run by default. The AI-powered Pulse insights tools use this scope to confirm the site has Tableau+. (#1202)
Who has to act:
With strict scope matching (the default), tokens issued before this release must be re-consented to get the new scope.
With DISABLE_STRICT_SCOPE_MATCH=true, existing tokens keep working. The AI Pulse insight tools are left out instead of failing.
Connectors that pin a static scope list need to add tableau:entitlements:read.
Tableau+ message reworded. When the AI Pulse insight tools are omitted, the message now says the Tableau+ entitlement "could not be confirmed" instead of claiming the site lacks Tableau+. (#1202)
Hosted deployment
Staged-upload S3 keys are now tenant-scoped. Workbook and datasource upload keys are namespaced per tenant. A request fails with an internal error if the tenant can't be resolved. Clients must allow egress to the file staging storage endpoints listed in the docs. (#1206, #1211)
Switching sites. Docs now explain that a hosted connection is bound to the site approved at sign-in, with reset steps for Slack, Claude, Claude Code and ChatGPT. (#1227)
IP filtering. New docs topic for Tableau Cloud IP filtering. (#1227)
Tool improvements
get-datasource-metadata takes optional field selectors to fetch specific fields instead of the whole catalog. (#1209)
query-datasource now accepts internal field names. (#1150)
Admin Insights lists known field captions per kind, and "Unknown Field" errors point at them. (#1225)