Metabase

Connect Ploy to Metabase to automatically manage user access and lifecycle. Ploy reads your Metabase user directory—emails, names, active status, and permissions—to enforce governance policies.

What Ploy needs

• Instance URL — the full base URL of your Metabase instance (e.g. https://metabase.company.com)

• API Key — prefixed with mb_..., assigned to the Administrators group

Create an API key in Metabase

1. Go to Admin Settings > Authentication > API Keys

2. Click Create API Key

3. Give it a descriptive name (e.g. "Ploy Integration")

4. Assign it to the Administrators group—Ploy's connection test requires admin-level access to /api/user/current

5. Copy the mb_... key—it's only shown once

Network access for self-hosted instances

If you're running Metabase on your own infrastructure:

• Ploy's servers need HTTPS access (port 443) to your Metabase instance

• The URL must be publicly reachable or reachable from Ploy's infrastructure

• If behind a VPN or firewall, allowlist Ploy's IPs (contact support for the current list)

What Ploy reads

Ploy accesses only user management endpoints:

• User directory: email, name, active status, superuser flag, last login, join date

• Not accessed: questions, dashboards, databases, or query results