Back to Browse

Qseow MCP Server

Developer ToolsModerate6.3MCP RegistryLocal
Free

Server data from the Official MCP Registry

Agent tools for Qlik Sense Enterprise on Windows: troubleshoot, govern, query and build.

About

Agent tools for Qlik Sense Enterprise on Windows: troubleshoot, govern, query and build.

Security Report

6.3
Moderate6.3Moderate Risk

qseow-mcp is a well-architected MCP server for Qlik Sense with appropriate authentication mechanisms (certificate and JWT), comprehensive input validation via Zod schemas, and thoughtful permission scoping. The codebase demonstrates security-conscious design patterns including credential redaction, mutation gating, and read-only defaults. Minor findings around error handling and logging practices do not materially impact the security posture for a developer-facing tool whose purpose requires broad network and filesystem access. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

Hostname of the Qlik Sense node, no scheme (e.g. sense.example.com).Optional

Environment variable: QSEOW_HOST

'certificate' (service identity via QMC-exported certs) or 'jwt' (per-user, through a JWT virtual proxy). Defaults to certificate.Optional

Environment variable: QSEOW_AUTH_MODE

Path to the QMC-exported client certificate (PEM). Required in certificate mode; also enables the Proxy-API session tools in jwt mode.Optional

Environment variable: QSEOW_CERT_PATH

Path to the client certificate private key (PEM).Optional

Environment variable: QSEOW_CERT_KEY_PATH

Path to the Qlik root CA (PEM). Supply it to keep TLS verification on.Optional

Environment variable: QSEOW_ROOT_CERT_PATH

Signed JWT for the virtual proxy (jwt mode only).Required

Environment variable: QSEOW_JWT

Virtual proxy prefix for jwt mode, e.g. 'jwt'.Optional

Environment variable: QSEOW_VP_PREFIX

Set true to register write tools. Default false: mutating tools are never registered, so the tool list is genuinely read-only.Optional

Environment variable: QSEOW_ALLOW_MUTATIONS

Comma-separated personas to expose: analyst, developer, admin.Optional

Environment variable: QSEOW_TOOL_GROUPS

Set false only for self-signed lab certificates. Leave on in production.Optional

Environment variable: QSEOW_TLS_VERIFY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-rmterenzi-qseow-mcp": {
      "env": {
        "QSEOW_JWT": "your-qseow-jwt-here",
        "QSEOW_HOST": "your-qseow-host-here",
        "QSEOW_AUTH_MODE": "your-qseow-auth-mode-here",
        "QSEOW_CERT_PATH": "your-qseow-cert-path-here",
        "QSEOW_VP_PREFIX": "your-qseow-vp-prefix-here",
        "QSEOW_TLS_VERIFY": "your-qseow-tls-verify-here",
        "QSEOW_TOOL_GROUPS": "your-qseow-tool-groups-here",
        "QSEOW_CERT_KEY_PATH": "your-qseow-cert-key-path-here",
        "QSEOW_ROOT_CERT_PATH": "your-qseow-root-cert-path-here",
        "QSEOW_ALLOW_MUTATIONS": "your-qseow-allow-mutations-here"
      },
      "args": [
        "-y",
        "qseow-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!