Basedash MCP vs OpenMetadata

Basedash MCP 55

Ten tools, grouped by the vendor into ask, build and look up. Their definitions' size couldn't be measured without a session, so 20 of 25 rather than 25. No paging, filters or size controls are documented for list_dashboards or list_charts; ask_question returns tables as CSV files rather than inline rows, and the client can page through the tool list, per the changelog of 14 August 2026 (5 of 20). The troubleshooting section names Forbidden or not-a-member, usage blocked and not-found or archived artifacts with what to do, and ask_question and get_data_sources return typed structured payloads since 5 June 2026 (10 of 20). edit_dashboard is annotated destructive and a failed dashboard or chart build is cleaned up, but no readOnlyHint on the look-up tools or idempotency on the create tools is documented (10 of 20). One or two required inputs per tool and nothing to install; the only official SDK is the React embedding SDK, which isn't for MCP (10 of 15). Total 55.

OpenMetadata 85

16 tools listed on a default deployment, with 13,653 characters of descriptions and 49,602 characters of definitions in all (about 12,400 tokens). The four RDF tools are withheld when RDF is off, which helps but isn't a subset the user picks (15 of 25). limit, offset and a nextCursor since 2.0, fields selection, column windows for wide tables, aggregations, persona search scopes and a response budget that flags truncated and hasMore (20). Errors come back with isError, a JSON message and a status code (400, 403 and so on), and soft errors inside a result are flagged too (18 of 20). All 20 definitions carry readOnlyHint and destructiveHint, with idempotentHint true on two, but there are no idempotency keys for the four write tools (17 of 20). Search and entity reads need few or no required fields, and the repository holds Python and Java SDKs (15).

Basedash MCP 57

The served tool definitions can be read only in a signed-in MCP session, which this run doesn't open. The docs and feature page list all ten tools with their inputs, which are required or optional, their scopes, what each returns and which one is annotated destructive, and the REST API counterpart has a public OpenAPI 3.1.0 file (50 paths, 91 operations). Judgement call, 10 of 25 for documented inputs without published JSON Schemas. llms.txt and Markdown copies of every docs page are served (10). Each tool's purpose is stated, with when to use MCP over the REST API and get_data_sources described as the call to make before asking; when not to call a build tool isn't stated (12 of 20). Inputs are a free-text question or instructions plus ids, with no enums or constraints documented (5 of 15). Example questions on the feature page and the launch posts, and troubleshooting for Forbidden or not-a-member, usage blocked and not-found errors, but no error payload shapes (10 of 15). A public dated changelog with MCP entries on 5 June, 14 August, 4 and 25 September and 7 and 9 October 2026, and a server.json version (1.1.0), but the registry entry is still 1.0.0 and the llms.txt of 7 October 2026 still describes two tools (10 of 15). Total 57.

OpenMetadata 85

Every MCP tool has a typed JSON Schema in tools.json. The REST API has no public spec, since the openapi.json linked from llms.txt is a template titled OpenAPI Plant Store (22 of 25). llms.txt indexes about 3,100 pages across 2.0.x, 1.13.x and a 2.1.x snapshot (10). Descriptions say when to use each tool, when to use another ("Choose this over semantic_search when the query targets known identifiers") and where answers go silently wrong (19 of 20). Required fields are marked, but few enums, queryFilter takes raw OpenSearch DSL in a string and patch_entity takes a JSON Patch blob (8 of 15). Examples inside the descriptions, and errors as JSON with a message and a status code, but no error catalogue in the docs (12 of 15). Versioned docs for 1.13.x, 2.0.x and a 2.1.x snapshot, and dated release notes for every 2.0.x patch. The registry entry's 21 tools doesn't match the source (14 of 15).

Basedash MCP 74

The editorial half. A closed service under dated terms (14 October 2026) naming Basedash Inc. and Delaware law, with 30 days' notice of material adverse changes to the agreement (15). The privacy policy (1 June 2026), the data processing addendum (6 October 2026) and the security docs agree that customer data isn't used for training by Basedash or its AI providers, and the security docs say table and column names and query results go to AI providers. Retention periods differ by document. The privacy policy says a reasonable period, the terms 60 days after a deletion request, the security docs complete removal on request, and audit events are kept 90 days. Locations differ in wording (San Francisco servers in the security docs, DigitalOcean in the United States in the privacy policy) (18 of 30). No deprecation policy for the MCP server; the REST API is unversioned and breaking changes are communicated in advance when possible, and the dashboard scopes were granted to existing connections without re-authorising (8 of 20). The DPA names ten subprocessors (OpenAI, Sentry, Stripe, DigitalOcean, Anthropic, Amazon Web Services, Microsoft Azure, Fivetran, MotherDuck, Betterstack) in the United States and the Czech Republic (16 of 20). Total 57.

OpenMetadata 54

The platform is Apache-2.0, but the module an agent talks to has a LICENSE file with the Collate Community License 1.0, a source-available licence barring competing hosted services, while its Java headers and the README say Apache-2.0 (15 of 30). Collate's privacy policy (24 August 2022) covers the service, names Stripe and gives no retention period, and the terms (29 August 2022) host data in the United States, take a perpetual licence to contributions and set no deletion timeline. We found no DPA or subprocessor list, and the trust centre refused our reader (8 of 30). Breaking changes in release notes and versioned docs, but no deprecation notice policy and a stale supported-versions table (10 of 20). We found no telemetry to the vendor in the UI, ingestion or service dependencies, and UI web analytics post to the instance's own API, but no page says so either way (18 of 20).

Basedash MCP 70

Graded with the hosted lines, on the remote server at charts.basedash.com. Instatus status page at status.basedash.com with one component, App, and notices back to April 2021; the MCP server isn't a separate component (20). No notices since 14 March 2026 and 100.0 per cent shown for September, October and November 2026, so the last 90 days are clean (30). No rate limit is published for the MCP server. The public API allows 60 requests a minute by default, per the changelog of 7 August 2026, which we count in part since the MCP surface may differ (5 of 15). The OpenAPI file documents a 429 with RateLimitExceeded and retryAfterMs on all 91 operations and an Idempotency-Key on starting a chat, but nothing is documented for 429s or retries over MCP (5 of 15). No uptime SLA; the about page names priority support SLAs on Enterprise only (0). The server isn't labelled beta or preview and is on both paid plans (10). Total 70.

OpenMetadata 84

Read with the local-software lines, since the MCP server agents use is part of the OpenMetadata server its owner runs, and Collate's hosted plans include MCP only on Enterprise. Docker images and Compose files per release, a Python ingestion package, and requirements stated (Docker 20.10+, Compose v2.1.1+, 6 GiB, 4 vCPUs) (20). 65 workflows, among them unit tests and integration tests on Postgres with OpenSearch and on MySQL with Elasticsearch, passing on main per the 3 October check, not re-read on 1 November (25). Per the 3 October check, 688 open issues, among them a semantic search bug in search_metadata (#34564) and an unmasked-connection report against the MCP entity tool (#34566), whose fix is on main and in the 2.1.0-rc1 pre-release only. Replies weren't visible then and GitHub's pages refused our reader on 1 November (12 of 25). Release notes carry breaking-change sections, and 2.0.7's notes warn API and SDK users about the connection change before upgrading, but that change came in a patch release, and SECURITY.md still names 1.13.x and 1.12.x as supported (12 of 15). Version 2.0.7 (15).

Basedash MCP 75

Read as a closed hosted service. The changelog's latest entry is 30 October 2026, and the latest MCP-specific entries are 7 and 9 October 2026 (chart placement on a dashboard tab, restyled MCP sign-in pages), all within 30 days (30). Weekly dated changelog entries, with MCP changes on 14 August, 4 and 25 September and 7 and 9 October 2026 (20). Support by email and by Slack on paid plans, with response times not tested (10 of 15). Active in the official MCP registry as com.basedash/mcp under the reverse-DNS namespace for basedash.com, though its description still names two tools (15). No package to judge; the registry entry lags the repository's server.json (0 of 10). Total 75.

OpenMetadata 89

2.0.7 tagged on 27 October 2026 (30). Since 3 August, eleven releases (1.13.4 to 1.13.6 and 2.0.0 to 2.0.7) and two pre-releases (2.0.0-rc2 and 2.1.0-rc1 on 28 October), by tag commit dates (20). Per the 3 October check, 688 open issues and 195 open pull requests, with labels on many of the newest reports. Reply times weren't visible then, and GitHub's pages refused our reader on 1 November (15 of 25). Listed in the official MCP registry as io.github.open-metadata/openmetadata-mcp, a GitHub-verified namespace, at 1.1.1 since 10 September 2026, and Python and Java SDKs ship from the same repository (15). 65 CI workflows, with integration tests passing on main per the 3 October check (9 of 10).

Basedash MCP 32

No x402, MPP or L402 (0). Plan prices are public, $1,000 a month for Startup with $1,000 of AI credits included, but the cost of an MCP question in AI usage isn't published (10). A 14-day trial needs no card, includes up to $250 of AI usage and has the MCP server, since it's on every plan and the trial has full feature access (20). A person signs up in a browser and approves the OAuth connection; clients can register themselves with the authorisation server, which earns 2 (2 of 20). Total 32.

OpenMetadata 20

Scored on the paid option, as the self-hosted rule asks for open-source software sold beside a hosted version (Collate). No x402, MPP or L402 (0). The Free plan is published, but Premium, Enterprise and the AI add-on are contact sales (0). Collate Free needs no card and self-hosting is free, though Collate Free leaves MCP out (20). A person signs up in a browser or deploys an instance and creates a token (0).