Power BI MCP Safety and Execution Protocol

The agent proposes, the user approves, and then the agent executes. Apply this protocol to every Power BI MCP session.

Architecture Boundary

• Report layer: visuals, charts, colors, tooltips, and formatting. Provide manual specifications only.
• Power Query / M layer: data sources and transformations. Draft M code for manual application; do not apply it through semantic-model tools.
• Semantic model layer: DAX measures, tables, relationships, roles, and TMDL. This is the MCP read/write scope.

Action Tiers

Tier 1: Read-only

No confirmation is required, but announce the read scope. Examples: schema and metadata reads, dependency analysis, row counts, data-quality queries, TMDL export, and drafting unapplied DAX or M.

Tier 2: Structural write

Confirm before creating or modifying measures, calculated objects, relationships, folders, format strings, or RLS roles and rules.