Datris
PYPI · DATRIS-MCP-SERVER · 2 COMPONENTS · SCANNED SEP 20
The data control plane for AI agents — acquire, validate, land, and query data over MCP.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
- 0 of 32 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 1 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability77
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 20572 tokens (~267/item across 77 items; 75 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management60
- Stability observed for 18 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 7 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "delete_pipeline" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 77 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Datris MCP server?
Datris runs locally as a PyPI package, launched with uvx datris-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · datris-mcp-server
claude mcp add datris-datris -- uvx datris-mcp-server
{
"mcpServers": {
"datris-datris": {
"command": "uvx",
"args": [
"datris-mcp-server"
]
}
}
} {
"servers": {
"datris-datris": {
"command": "uvx",
"args": [
"datris-mcp-server"
]
}
}
} codex mcp add datris-datris -- uvx datris-mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"datris-datris": {
"type": "local",
"command": [
"uvx",
"datris-mcp-server"
],
"enabled": true
}
}
} openclaw mcp add datris-datris --command uvx --arg datris-mcp-server
mcp_servers:
datris-datris:
command: "uvx"
args: ["datris-mcp-server"] {
"McpServers": {
"datris-datris": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"datris-mcp-server"
]
}
}
} assistant mcp add datris-datris -t stdio -c uvx -a datris-mcp-server
{
"mcpServers": {
"datris-datris": {
"command": "uvx",
"args": [
"datris-mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 18 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- Package version: 1.32.0 → 1.33.1 functional
- Package version: 1.32.0 → 1.33.0 functional
- 17 Sept 26 0
- Tool safety: pass → unverified ▼ security
- Stability: 0.47 → unverified ▼ security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Package version: 1.30.1 → 1.32.0 functional
- 16 Sept 26 +1
- Package version: 1.30.0 → 1.30.1 functional
- 14 Sept 26 +1
- Package version: 1.29.0 → 1.30.0 functional
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 10 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- Package version: 1.28.1 → 1.29.0 functional
- Package version: 1.28.1 → 1.28.2 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/datris-mcp-server@1.33.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 32 packages
| Packages resolved | 32 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
list_weaviate_classes ~35
List all classes in the Weaviate vector database. Use this to discover available classes before running search_weaviate.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
profile_data ~126
Send data and use AI to generate a comprehensive data profile: summary statistics per column, data quality issues detected, and suggested validation rules. Use the suggested aiRule when building a pipeline's dataQuality section.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Base64-encoded file content |
| delimiter | string | – | CSV delimiter (default: comma) |
| filename | string | yes | Filename (e.g., sample.csv) |
| header | boolean | – | Whether CSV has a header row (default: true) |
| sample_size | integer | – | Number of rows to sample for profiling (default: 200) |
No output schema declared.
No examples provided.
query_databricks ~322
Run a read-only query against the Databricks workspace a pipeline loads into. Pass the pipeline name; the server resolves the workspace, credentials, SQL warehouse, and catalog from the pipeline's config — same connection the loader uses, credentials never leave the server. Only works for pipelines whose destination is Databricks (database with useDatabricks=true). Allowed statements: SELECT (WITH/CTE), SHOW, and DESCRIBE — LIMIT is auto-appended to SELECTs. Omit `sql` to preview the pipeline's destination table (the 'did my load land?' check). Metadata discovery uses the same tool — there are no separate list_databricks_* tools: `SHOW CATALOGS`, `SHOW SCHEMAS IN <catalog>`, `SHOW TABLES IN <catalog>.<schema>`, `DESCRIBE TABLE <catalog>.<schema>.<table>`, or query <catalog>.information_schema.columns. Queries run on the customer's SQL warehouse (which costs them compute) — keep them targeted and let the default LIMIT stand unless the user asks for more. If the warehouse is stopped, the first query auto-starts it and may take longer.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum rows to return (default: 100). Pass -1 for unlimited. |
| pipeline | string | yes | Pipeline name (from list_pipelines). Must have a Databricks destination. |
| sql | string | – | Read-only statement: SELECT/WITH, SHOW, or DESCRIBE. Omit to preview the pipeline's destination table. |
No output schema declared.
No examples provided.
query_mongodb ~116
Query a MongoDB collection with optional filter and projection. Use list_mongodb_databases and list_mongodb_collections first to discover available data. Returns matching documents as JSON.
| Name | Type | Req | Description |
|---|---|---|---|
| collection | string | yes | MongoDB collection name |
| filter | object | – | MongoDB query filter (default: {}) |
| limit | integer | – | Maximum documents to return (default: 20). Pass -1 for unlimited — no cap, returns every matching document. |
| projection | object | – | Fields to include/exclude (default: all fields) |
No output schema declared.
No examples provided.
query_natural ~136
Ask a question in natural language about data in a PostgreSQL table. The AI generates a SQL query from the question and table schema, executes it, and returns the results. Use this instead of writing SQL manually.
| Name | Type | Req | Description |
|---|---|---|---|
| database | string | – | Database name (default: datris) |
| limit | integer | – | Maximum rows to return (default: 100). Pass -1 for unlimited — no cap, returns every matching row. |
| question | string | yes | Natural language question about the data |
| schema | string | – | PostgreSQL schema (default: public) |
| table | string | yes | PostgreSQL table name to query |
No output schema declared.
No examples provided.
query_objectstore ~237
Read rows from a pipeline's objectStore destination (Parquet files, ORC files, or an Iceberg table in MinIO or AWS S3). Pass the pipeline name; the server resolves the bucket, prefix, format, and credentials from the pipeline config — same code path the writer uses, so MinIO and S3 destinations both work. Returns up to `limit` rows as JSON objects keyed by column name, plus the resolved s3a:// path and format for transparency. For an Iceberg table the response also carries snapshotId (a decimal string, not a number) and snapshotTimestamp (ISO-8601) of the snapshot read; both are null for other formats. Returns 0 rows (not an error) when the pipeline has no successful runs yet. This is the right tool when list_pipelines shows objectStore as the destination — query_postgres / query_mongodb / search_* will not work against objectStore data.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum rows to return (default: 100, hard cap: 10000). |
| pipeline | string | yes | Pipeline name (from list_pipelines). |
No output schema declared.
No examples provided.
query_postgres ~236
Execute a read-only SQL SELECT query against PostgreSQL. Use the metadata discovery tools (list_postgres_databases, list_postgres_schemas, list_postgres_tables, list_postgres_columns) first to explore available data before constructing queries. Only SELECT is allowed; LIMIT is auto-appended if missing. Queries are cancelled if they run too long, so avoid full-table scans. For approximate row counts — "how many rows / records does table X have", overviews, or summarizing several tables — do NOT run exact `SELECT COUNT(*)` (it scans the whole table and can take many seconds on a large one). Instead read the planner estimate, which is effectively instant regardless of table size: `SELECT reltuples::bigint AS estimate FROM pg_class WHERE relname = '<table>'`. Use exact `COUNT(*)` only when the user explicitly needs an exact count of a known-small or filtered result.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum rows to return (default: 100). Pass -1 for unlimited — no cap, returns every matching row. |
| sql | string | yes | SQL SELECT query to execute |
No output schema declared.
No examples provided.
query_snowflake ~301
Run a read-only query against the Snowflake account a pipeline loads into. Pass the pipeline name; the server resolves the account, credentials, warehouse, and role from the pipeline's config — same connection the loader uses, credentials never leave the server. Only works for pipelines whose destination is Snowflake (database with useSnowflake=true). Allowed statements: SELECT (WITH/CTE), SHOW, and DESCRIBE — LIMIT is auto-appended to SELECTs. Omit `sql` to preview the pipeline's destination table (the 'did my load land?' check). Metadata discovery uses the same tool — there are no separate list_snowflake_* tools: `SHOW DATABASES`, `SHOW SCHEMAS IN DATABASE <db>`, `SHOW TABLES IN SCHEMA <db>.<schema>`, `DESCRIBE TABLE <db>.<schema>.<table>`, or query <db>.information_schema.columns. Queries run on the customer's configured warehouse (which costs them compute) — keep them targeted and let the default LIMIT stand unless the user asks for more.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum rows to return (default: 100). Pass -1 for unlimited. |
| pipeline | string | yes | Pipeline name (from list_pipelines). Must have a Snowflake destination. |
| sql | string | – | Read-only statement: SELECT/WITH, SHOW, or DESCRIBE. Omit to preview the pipeline's destination table. |
No output schema declared.
No examples provided.
restore_pipeline_version ~230
Roll a pipeline back (or forward) to a prior definition version. APPEND-ONLY and SIDE-EFFECTING: reads snapshot `version` and writes it as a NEW latest version, preserving full history. 'Rolling forward' is the same call with a higher version number. Only call this when the operator has explicitly asked to restore/roll back this specific pipeline to a specific version. Report the new version and stop. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Name of the pipeline |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
| version | integer | yes | Version to restore (becomes a new latest version) |
No output schema declared.
No examples provided.
restore_tap_version ~273
Roll a tap back (or forward) to a prior definition version. This is APPEND-ONLY and SIDE-EFFECTING: it reads snapshot `version` and writes it as a NEW latest version (config + that version's script), preserving the full history — nothing is overwritten or lost. 'Rolling forward' is the same call with a higher version number. Only call this when the operator has explicitly asked to restore/roll back this specific tap to a specific version. It does NOT run the tap — after restoring, report the new version and stop; do not chain into `run_tap` unless separately and explicitly asked. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Name of the tap |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
| version | integer | yes | Version to restore (becomes a new latest version) |
No output schema declared.
No examples provided.
run_doctor ~192
Run the platform's operational self-check and return a report: Vault token expiry, AI slot secrets complete, embedding model actually loaded, disk usage, component version skew, and (opt-in) whether each AI model answers. Each non-ok check carries a remediation command for the operator; nothing is changed. Do NOT call run_doctor as part of the normal workflow — it is slow. Only use it for diagnostics when something fails or the user asks about the deployment's health. Host-level checks (Docker volumes, container env drift) need `datris doctor` on the machine running Docker and are not included here.
| Name | Type | Req | Description |
|---|---|---|---|
| include_ai_probes | boolean | – | Also send a minimal request through each configured AI slot to confirm the key and model work (spends a few tokens). Default false. |
| mode | string | – | `full` (default) or `quick` (only the cheap startup-safe subset). |
No output schema declared.
No examples provided.
run_tap ~1,120
Manually trigger a tap. Executes the script; when a target pipeline is configured, hands records to the pipeline async. The response carries `recordCount`, `publisherToken`, `pipelineTokens`, `persisted`, `persistedReason`, and the script's `logs` — but NOT the records themselves. If you need to preview what the script produces, call `test_tap` instead. BEFORE the first run of a newly-created or newly-updated tap, you MUST have called `test_tap` and seen it succeed. See the VALIDATION RULE in the server instructions. Skipping the test on a fresh script pushes potentially-broken data into the destination — and `run_tap` doesn't return records, so you won't see the breakage from the response. PER-RUN PARAMS — pass a `params` object to drive this run with caller-supplied values (date range, id list, page cursor, etc.). Each key/value becomes an env var the script reads via `os.environ.get('DATRIS_TAP_PARAM_<key>')`. Keys must match `[A-Za-z_][A-Za-z0-9_]*` so they map cleanly onto env var names. Values are stringified; nested objects/arrays are JSON-encoded (script can `json.loads()` them back). Use this for anything that varies per-call — date windows, id lists, page cursors, batch sizes. Do NOT rewrite the tap secret to pass per-run params: secrets are for credentials (API keys, DB passwords); rewriting them on every call clobbers concurrent runs, pollutes audit history, and wastes Vault writes. If the tap script doesn't yet read a particular param, update the script by calling `create_tap` again with the same `name` and a revised `script` (create_tap upserts and replaces the existing script). That's the right shape for parameterized runs. REQUIRED next steps based on the response: • `persisted: true` → load is still running. Call `get_pipeline_status(publisher_token=response.publisherToken)` and poll until `rollup.allDone` is true. Then read `rollup.status` (`success`/`warning`/`error`) and `rollup.jobs[].lastError`. Do not report completion or query the desti…
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Name of the tap to run |
| params | object | – | Optional per-run parameters injected into the script as DATRIS_TAP_PARAM_<key> env vars. Use for values that vary per call (date ranges, id lists, page cursors, batch sizes) — NOT for credentials (th… |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
No output schema declared.
No examples provided.
search_chroma ~100
Semantic search across a Chroma vector database collection. Takes a natural language query, generates an embedding, and returns the most similar document chunks with similarity scores. For RAG: pass the returned text to ai_answer with the user's question.
| Name | Type | Req | Description |
|---|---|---|---|
| collection | string | – | Chroma collection name (default: documents) |
| query | string | yes | Natural language search query |
| top_k | integer | – | Number of results to return (default: 5) |
No output schema declared.
No examples provided.
search_milvus ~101
Semantic search across a Milvus vector database collection. Takes a natural language query, generates an embedding, and returns the most similar document chunks with similarity scores. For RAG: pass the returned text to ai_answer with the user's question.
| Name | Type | Req | Description |
|---|---|---|---|
| collection | string | – | Milvus collection name (default: documents) |
| query | string | yes | Natural language search query |
| top_k | integer | – | Number of results to return (default: 5) |
No output schema declared.
No examples provided.
search_pgvector ~127
Semantic search across a PostgreSQL pgvector table using cosine distance. Takes a natural language query, generates an embedding, and returns the most similar document chunks with similarity scores. Use list_postgres_tables with vector_only=true to discover available pgvector tables. For RAG: pass the returned text to ai_answer.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Natural language search query |
| schema | string | – | PostgreSQL schema (default: public) |
| table | string | – | Table name (default: documents) |
| top_k | integer | – | Number of results to return (default: 5) |
No output schema declared.
No examples provided.
search_qdrant ~103
Semantic search across a Qdrant vector database collection. Takes a natural language query, generates an embedding, and returns the most similar document chunks with similarity scores. For RAG: pass the returned text to ai_answer with the user's question.
| Name | Type | Req | Description |
|---|---|---|---|
| collection | string | – | Qdrant collection name (default: documents) |
| query | string | yes | Natural language search query |
| top_k | integer | – | Number of results to return (default: 5) |
No output schema declared.
No examples provided.
search_weaviate ~104
Semantic search across a Weaviate vector database class. Takes a natural language query, generates an embedding, and returns the most similar document chunks with similarity scores. For RAG: pass the returned text to ai_answer with the user's question.
| Name | Type | Req | Description |
|---|---|---|---|
| class_name | string | – | Weaviate class name (default: Documents) |
| query | string | yes | Natural language search query |
| top_k | integer | – | Number of results to return (default: 5) |
No output schema declared.
No examples provided.
set_catalog ~298
Set or clear the catalog grouping label on an existing pipeline or tap. ONLY call this when the user has explicitly asked to organize work under a named catalog. Do NOT call it proactively — catalogs are a user-chosen organizational convention; assigning one for them puts the pipeline/tap into a taxonomy they didn't ask for. Pass exactly one of `pipeline` or `tap` to identify the target. Pass `catalog` to set the label, or omit it (or pass an empty string) to clear it. Survives subsequent re-ingests — `datris ingest` no longer rewrites an existing pipeline's config. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| catalog | string | – | Catalog label. Omit or pass an empty string to clear the label. |
| pipeline | string | – | Pipeline name to update. Mutually exclusive with `tap`. |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
| tap | string | – | Tap name to update. Mutually exclusive with `pipeline`. |
No output schema declared.
No examples provided.
set_tap_state ~324
Overwrite or reset a tap's incremental-sync state. Pass `state` (a JSON object) to set the bookmark the next run receives via DATRIS_TAP_STATE — e.g. rewind a cursor so a window is re-fetched. Pass `reset: true` to delete the state entirely: the next run sees no DATRIS_TAP_STATE and does a full first-run fetch. The state shape is defined by the tap's own script (read its code via get_tap to see what keys it expects). Only use this on explicit request or to recover a broken cursor — normal runs manage state themselves, committing it only after a successful run. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Name of the tap |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
| reset | boolean | – | If true, delete the stored state entirely (next run = full first-run fetch). Ignores `state`. |
| state | object | – | The state object the next run should receive. Must match the keys the tap's script reads from DATRIS_TAP_STATE. |
No output schema declared.
No examples provided.
test_tap ~169
Test-run a tap without pushing data to the pipeline. Executes the tap's script and returns results, record count, and any errors. Use this to validate a script before running it for real. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Name of the tap to test |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
No output schema declared.
No examples provided.
update_secret ~236
Update an AI provider secret in the Datris platform. Use this to configure your AI API keys so Datris can use AI features (data profiling, schema generation, AI transformations, RAG). Only AI-related secrets can be updated: anthropic, openai, azure, grok, ollama, embedding. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | object | yes | Key-value fields to set. Typical fields: endpoint (API URL), model (model name), apiKey (API key) |
| name | string | yes | Secret name: anthropic, openai, azure, grok, ollama, or embedding |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
No output schema declared.
No examples provided.
update_tap ~583
Update an existing tap's CONFIG without regenerating the script. Change the enabled state, CRON schedule, target pipeline, or description. USE THIS to set or adjust a tap's schedule (`cron_expression`) whenever the user describes a recurrence (nightly, daily, every morning, market open, etc.). The platform's scheduler runs the tap on the cadence you set — no external cron, Airflow DAG, or shell loop is needed (or wanted). See the SCHEDULING RULE in the server instructions. VALIDATION RULE: if you're enabling a `cron_expression` on a tap whose script has NEVER been validated, call `test_tap` FIRST and confirm it succeeds. The cadence-change path is safe for taps that have already run successfully; it is not safe to set a cron on a never-tested script. The platform enforces this: setting `cron_expression` on an untested script returns HTTP 409 with the remedy — save the tap without the cron, call `test_tap` until it succeeds, then call `update_tap` again with the cron. Cadence-only changes on a tap whose current script has passed `test_tap` are accepted. To change the SCRIPT itself, call `create_tap` again with the same `name` and the new `script` or `instruction` — create_tap upserts by name and replaces the existing script. There is no separate script-only update tool. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| cron_expression | string | – | Quartz CRON expression for recurring runs (e.g., '0 0 * * * ?' for hourly, '0 30 5 ? * MON-FRI' for weekdays 5:30am). SET THIS whenever the user describes a recurrence — nightly, daily, hourly, marke… |
| description | string | – | New plain-English description |
| enabled | boolean | – | Enable or disable the tap |
| endpoint_url | string | – | For HTTP taps only: new endpoint URL Datris POSTs the run context to. Rejected on Python taps. |
| name | string | yes | Name of the tap to update |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
| target_pipeline | string | – | New target pipeline name |
No output schema declared.
No examples provided.
upload_config ~199
Upload a configuration file to the Datris platform. Supports 'validation-schema' (JSON Schema files used in pipeline dataQuality schema validation). Send the file content as base64. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Base64-encoded file content |
| filename | string | yes | Filename (e.g., schema.json, transform.js) |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
| type | string | yes | Config file type: 'validation-schema' for JSON Schema |
No output schema declared.
No examples provided.
upload_data ~322
Upload data to a registered pipeline for processing. Send the ENTIRE file content as a single base64-encoded string in ONE call — do not pre-split or chunk the content client-side. Vector destinations (pgvector, qdrant, weaviate, milvus, chroma) apply recursive chunking server-side using the pipeline's configured chunkSize/chunkOverlap; for those, one upload_data call yields many embedded chunks automatically. The pipeline's rules are applied: schema validation, data quality checks, transformations, then routing to the configured destination. A pipeline whose destination is scratch validates or transforms the file and hands the rows back (status rollup `resultPreview`, then get_pipeline_result) instead of landing them. Returns a pipelineToken for tracking job status via get_job_status. If this Datris instance's agent policy requires a person to approve this action, the call does NOT perform it: it returns status `pending_approval` with an `approvalId`. Tell the user it is waiting for approval in Datris, then poll `get_approval` with that id (pause with `wait_seconds` between polls) — do not re-issue the action.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Base64-encoded file content |
| filename | string | yes | Filename (e.g., data.csv, report.json, orders.xml) |
| pipeline | string | yes | Pipeline name to process the data with |
| reason | string | – | Optional one-line reason for this change, recorded in the platform's audit log and shown to anyone asked to approve it. |
No output schema declared.
No examples provided.
wait_seconds ~262
Sleep for a fixed number of seconds, then return. Use this to pace polling against long-running platform work (most often `get_pipeline_status` after `run_tap`, or `get_job_status` after `upload_data`) so you do not burn tool calls hammering an endpoint that is still in progress. ALWAYS poll once BEFORE the first wait — many runs finish in 1–5 seconds. Then use exponential backoff between polls: 5s, 10s, 20s, 30s, 60s, 60s, ... (cap at 60s normally, 120s only if the run is genuinely glacial). Reset to a short wait (5–15s) on the next cycle whenever a poll shows new jobs flipped to a terminal state — that means you're close to done. If 80%+ of jobs are terminal, wait ~15s; if only 1–2 jobs remain, wait ~10s. Hard upper bound is 120 seconds per call — for longer waits, call this tool in a loop interleaved with a status check.
| Name | Type | Req | Description |
|---|---|---|---|
| seconds | integer | yes | How long to sleep, in seconds. Range: 1–120. Values outside this range are clamped. |
No output schema declared.
No examples provided.
What is the Datris MCP server?
Datris is an MCP server listed in the public MCP registry as io.github.datris/datris. The data control plane for AI agents, acquire, validate, land, and query data over MCP. This page covers its PyPI package (datris-mcp-server).
Is the Datris MCP server safe to use?
Datris scores 78 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Datris MCP server expose?
Datris exposes 75 tools: list_pipelines, get_pipeline, create_pipeline, set_catalog, delete_pipeline, and 70 more. Their descriptions and schemas cost roughly 16,708 tokens of context every time the server is loaded.
Is the Datris MCP server still maintained?
Datris is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Datris MCP server under?
Datris declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.