io.github.shagarwal/databazaar
NPM · DATABAZAAR-MCP · 3 COMPONENTS
Search and preview datasets publicly. Account-required full data via MCP.
Available components
Last scanned (12 hours ago)
Scores higher than 65% of npm servers
Category Data and Analytics
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 32 of 104 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 25 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability85
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3348 tokens (~104/item across 32 items; 27 tools + 5 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management98
- Stability check failed: the tool surface changed between 1.3.0 and 1.5.1: 0 tool removals, 1 breaking changes, 5 additions. See how to fix → Fail
Tool Coverage93
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 79% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 28 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Security disclosure: unverified → fail ▼ functional
- 4 Nov 26 0
- Security disclosure: fail → unverified ▼ functional
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 94 to 98.
- 2 Nov 26 −1
No change was recorded against any check on this day. Stability & Change Management went from 98 to 94.
- 29 Oct 26 0
- CVE-2026-118663 affects this package: high ▼ security
- Security disclosure: unverified → fail ▼ functional
- 28 Oct 26 0
- Security disclosure: fail → unverified ▼ functional
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 94 to 98.
- 26 Oct 26 −1
No change was recorded against any check on this day. Stability & Change Management went from 98 to 94.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/databazaar-mcp@1.5.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 2 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-rmxm-3fg6-px4f | CVE-2026-118663 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | yes |
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 104 packages
| Packages resolved | 104 |
|---|---|
| Stale | 32 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
accept_bounty_submission ~89
Explicitly authorize the displayed reward for ONE submission. Multiple winners are allowed unless an optional cap is configured. Seller setup or payment authentication may be required; accepted is true only after funding succeeds. Resume the same submission to continue an existing purchase; never assume selection means payment completed.
| Name | Type | Req | Description |
|---|---|---|---|
| amount_cents | integer | yes | – |
| submission_id | string | yes | – |
| version | integer | yes | – |
No output schema declared.
No examples provided.
buy_now ~146
Authorize a one-time purchase of a dataset on the DataBazaar marketplace. Free datasets ($0) require no payment method and are immediately accessible. Paid datasets are charged via Stripe Checkout against the operator's saved card or a payment_method_id. DataBazaar is a marketplace; funds move through Stripe Connect to the seller and the platform fee is 3%. Call preview_sample first to verify the dataset matches the operator's need.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to purchase |
| payment_method_id | string | – | Stripe payment method ID (pm_...). Not needed for free ($0) datasets. Optional for paid datasets if a default card is saved for this operator. |
No output schema declared.
No examples provided.
check_coverage ~118
Check whether a known public data source (e.g. "noaa", "data.gov", "census.gov") is already on DataBazaar. Returns covered=true and matching datasets when the source is available; otherwise log_data_gap can record demand.
| Name | Type | Req | Description |
|---|---|---|---|
| source_name | string | – | Short name of the data source (e.g. "noaa", "census", "data.gov") |
| source_url | string | – | Full URL of the data source (e.g. "https://noaa.gov") — will be normalized |
No output schema declared.
No examples provided.
confirm_upload ~135
Confirm a file has been uploaded to its signed URL and trigger automatic sample generation (drafts only). Pass the full_data_path returned by get_upload_urls and the file format — use format "zip" for archives so the preview is generated from the archive contents. Poll get_listing_status until the sample is ready before publishing.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The draft dataset ID |
| format | string | – | Format of the uploaded file. Strongly recommended — the upload path has no extension. |
| full_data_path | string | yes | The storage path from get_upload_urls (e.g. "{ownerId}/{datasetId}/full") |
No output schema declared.
No examples provided.
contact_seller ~140
Send a message to a dataset seller to ask questions before purchasing — about freshness, schema details, geographic coverage, or update frequency. Messaging is free and does not require a prior purchase. Sellers typically respond within 24 hours.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | – | The dataset being asked about — helps the seller answer in context |
| message | string | yes | The question for the seller — be specific about what you need to know |
| seller_id | string | yes | The seller user ID — found in the seller field of any dataset response |
| subject | string | yes | Brief subject line, e.g. "Question about SF Rent 2024 dataset" |
No output schema declared.
No examples provided.
create_listing ~284
Create a new draft dataset listing on DataBazaar and return its dataset_id. Set price (USD) or price_cents for a paid listing — omitting both creates a FREE listing. After creating, use get_upload_urls to upload files, then publish_listing to go live.
| Name | Type | Req | Description |
|---|---|---|---|
| auction_config | object | – | Required for auction or hybrid pricing |
| category | string | – | Category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other |
| description | string | yes | Dataset description |
| documentation | object | – | – |
| license | – | – | Optional custom reuse terms/license name. If this and license_url are blank, accepted listing terms grant Open Use. |
| price | number | – | Price in USD (e.g. 19). Mutually exclusive with price_cents. |
| price_cents | integer | – | Price in integer cents (e.g. 1900 = $19.00). Mutually exclusive with price. |
| pricing_type | string | – | Pricing model. Inferred as buy_it_now when a positive price is given; defaults to free only when no price is supplied. |
| schema | object | – | Data schema describing columns/fields. Set { "format": "zip" } when uploading an archive. |
| tags | array | – | Keyword tags for discoverability |
| title | string | yes | Dataset title |
No output schema declared.
No examples provided.
find_data_for_task ~99
Given a free-text research or analysis task, return DataBazaar datasets ranked by relevance. More targeted than search_datasets — each result includes a why_relevant explanation tailored to the task description.
| Name | Type | Req | Description |
|---|---|---|---|
| budget_usd | number | – | Maximum budget in USD — omit to include all price ranges |
| task_description | string | yes | Describe the goal — e.g. "train a model to predict apartment rent in SF using 2024 listings" |
No output schema declared.
No examples provided.
get_bounty_submission ~42
Read an authorized submission, its review version, requirements, feedback, and settlement timeline. Does not expose full unpaid files.
| Name | Type | Req | Description |
|---|---|---|---|
| submission_id | string | yes | – |
No output schema declared.
No examples provided.
get_dataset ~66
Get full metadata for a specific dataset — schema, column counts, quality score, price anchoring, and a forwardable purchase pitch. Includes a checkout_url for one-click human purchase and a human_pitch field for operator messaging.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to retrieve |
No output schema declared.
No examples provided.
get_download_url ~165
Get a signed, time-limited (1 hour) download URL for a dataset the agent already has access to. All full downloads require account authentication. For free ($0) datasets, pass dataset_id; for paid datasets, pass purchase_id from a completed buy_now. URLs expire after 1 hour — call again for a fresh one. When retrieval_url is provided, prefer it for observed delivery and include the same account bearer token only on the DataBazaar API host. A manifest requires choosing files; one file need not be the whole dataset.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | – | Dataset ID — use this for free ($0) datasets. Account authentication required; no purchase needed. |
| purchase_id | string | – | Purchase ID from buy_now — use this for paid datasets. |
No output schema declared.
No examples provided.
get_listing_status ~52
Get the current status of a listing or draft. Used to poll for sample-generation completion (check sample_file_path or data_profile.auto_sample_status) before publishing.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID |
No output schema declared.
No examples provided.
get_purchase_receipt ~80
Get a cost-benefit receipt for a purchase: price paid, estimated scraping hours saved, and equivalent human-labor cost. The human_summary field is a one-liner suitable for forwarding to the operator (e.g. "$9 spent, ~6h scraping saved").
| Name | Type | Req | Description |
|---|---|---|---|
| purchase_id | string | yes | The purchase ID to generate a receipt for |
No output schema declared.
No examples provided.
get_related_datasets ~74
Given a dataset ID, return similar datasets in the same category ranked by tag overlap. Useful for cross-referencing data, finding alternative sources, or enriching an analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset to find relatives for |
| limit | integer | – | Number of related datasets to return (default 5) |
No output schema declared.
No examples provided.
get_upload_urls ~59
Provision signed upload URLs for a draft listing. Returns URLs for the sample and full dataset files. PUT file bytes directly to the returned upload_url, then call confirm_upload with the returned path.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The draft dataset ID |
No output schema declared.
No examples provided.
list_bounty_reviews ~61
List submissions the current verified agent is authorized to review, oldest first, with due dates and payment next actions.
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | – |
| limit | integer | – | – |
| offset | integer | – | – |
| updated_since | string | – | – |
No output schema declared.
No examples provided.
list_purchases ~68
List datasets purchased by this agent with status, prices, and download availability. Useful for spending audits, deduplicating before buy_now, or building a purchase summary for the operator.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| status | string | – | Filter by purchase status — omit to see all |
No output schema declared.
No examples provided.
log_data_gap ~115
Record an unmet data need on DataBazaar. When a suggested price is provided, this also creates a bounty listing visible to sellers. Returns a message_for_user string suitable for forwarding to the operator, including the bounty URL.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | yes | Detailed description of the data needed — format, time range, geography, etc. |
| query | string | yes | The search query or data need that returned no results |
| suggested_price_usd | number | – | Suggested bounty price in USD (default $25 if not provided) |
No output schema declared.
No examples provided.
preview_bounty_submission ~47
Get a temporary URL for the safe submission sample. Review the requirements and sample before authorizing a purchase.
| Name | Type | Req | Description |
|---|---|---|---|
| bounty_id | string | yes | – |
| submission_id | string | yes | – |
No output schema declared.
No examples provided.
preview_sample ~130
Preview sample rows of a dataset to verify it contains the expected columns, format, and quality. Returns a signed download URL for ~50 rows plus the schema. Pass an optional question to get a synthesized answer from the sample (e.g. "average price in 2024") — no purchase required.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to preview |
| question | string | – | Optional natural-language question to answer from the sample (e.g. "average rent in SF", "count of records per state"). Returns a synthesized_answer field with deterministic aggregates if the questio… |
No output schema declared.
No examples provided.
publish_listing ~180
Publish a draft listing to the marketplace. Requires: full dataset uploaded (get_upload_urls + confirm_upload), sample generation complete (poll get_listing_status), and owner verification. Requires documentation.source_name and explicit acceptance of the current listing terms: https://databazaar.io/legal/terms#dataset-reuse. Without custom terms, Open Use allows commercial use, modification, redistribution, and model training without attribution. The listing then goes through a content scan before becoming publicly visible.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The draft dataset ID to publish |
| listing_terms_version | string | yes | Version of listing terms explicitly accepted by the supplier |
| tos_confirmed | boolean | yes | Confirm authorization to accept https://databazaar.io/legal/terms#dataset-reuse: absent custom reuse terms, permit commercial use, modification, redistribution and model training without attribution. |
No output schema declared.
No examples provided.
query_dataset ~117
Run a structured filter query against a queryable dataset and return matching rows. Useful for extracting a subset without downloading the full dataset. Returns rows as a JSON array (max 10,000 per call).
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to query |
| limit | integer | – | Maximum rows to return (capped at 10,000). |
| select | array | – | Columns to return. Omit to return all columns. |
| where | array | – | Filter clauses combined with AND. Maximum 16 clauses per query. |
No output schema declared.
No examples provided.
review_bounty_submission ~71
Start review, request changes, decline, or extend once. Requires the current review version; a stale version returns a conflict. This tool does not authorize payment.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| reason | string | – | – |
| submission_id | string | yes | – |
| version | integer | yes | – |
No output schema declared.
No examples provided.
search_datasets ~188
Search the DataBazaar marketplace for datasets matching a natural-language query, with optional filters for category, price, quality score, and pricing type. Returns ranked listings with prices, quality scores, and checkout URLs. When results are empty, log_data_gap can post a bounty to signal demand to sellers.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter by category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other |
| limit | integer | – | – |
| max_price | number | – | Maximum price in USD — omit to include all prices |
| min_quality_score | number | – | Minimum assessed sample structure score (0-100); unassessed listings are excluded. See https://databazaar.io/quality for the rubric and limitations. |
| pricing_type | string | – | – |
| query | string | yes | Natural language search query describing the data needed |
No output schema declared.
No examples provided.
set_schema ~97
Set or update the data schema for a draft or active listing. Define the columns, types, and descriptions so buyers know what fields the dataset contains.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID |
| schema | object | yes | Schema object describing columns/fields. Example: { "columns": [{ "name": "id", "type": "integer" }, { "name": "email", "type": "string" }] } |
No output schema declared.
No examples provided.
share_finding ~97
Create a shareable finding record derived from analysis of a DataBazaar dataset. Returns a share_url the operator can send to their team. Public findings also help others discover the underlying dataset.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset used to generate this finding |
| public | boolean | – | Whether to make the finding publicly discoverable (default true) |
| summary | string | yes | 1-3 sentence summary of what was discovered |
No output schema declared.
No examples provided.
suggest_listing ~180
Propose a dataset (e.g. produced as a research byproduct) for listing on DataBazaar. Creates a draft pending approval and returns an approval URL the operator can click to publish. The message_for_user field includes the approval link and suggested price.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | yes | Category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other |
| description | string | yes | What the dataset contains, its source, format, and time range |
| sample_data | string | yes | First ~20 rows of the dataset as a string (CSV or JSON) |
| suggested_price_usd | number | – | Suggested listing price in USD — omit to let the operator decide |
| title | string | yes | Dataset title — clear, searchable, e.g. "NYC Parking Violations 2024 (CSV)" |
No output schema declared.
No examples provided.
update_listing ~293
Update metadata or pricing on a draft OR active listing. The correct API route is chosen from the listing's current status. To change the price of a live listing pass price (USD) or price_cents.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | New category |
| dataset_id | string | yes | The dataset ID to update |
| description | string | – | New description |
| documentation | object | – | – |
| license | – | – | Optional custom reuse terms/license name. If this and license_url are blank, accepted listing terms grant Open Use. |
| listing_terms_version | string | – | Version of listing terms explicitly accepted by the supplier |
| price | number | – | Price in USD (e.g. 19). Mutually exclusive with price_cents. |
| price_cents | integer | – | Price in integer cents (e.g. 1900 = $19.00). Mutually exclusive with price. |
| pricing_type | string | – | Pricing model. Inferred as buy_it_now when a positive price is given; defaults to free only when no price is supplied. |
| schema | object | – | Updated data schema |
| tags | array | – | New tags |
| title | string | – | New title |
| tos_confirmed | boolean | – | Confirm authorization to accept https://databazaar.io/legal/terms#dataset-reuse: absent custom reuse terms, permit commercial use, modification, redistribution and model training without attribution. |
No output schema declared.
No examples provided.
How do I install the io.github.shagarwal/databazaar MCP server?
io.github.shagarwal/databazaar runs locally as an npm package, launched with npx -y databazaar-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · databazaar-mcp
claude mcp add shagarwal-databazaar -- npx -y databazaar-mcp
What is the io.github.shagarwal/databazaar MCP server?
io.github.shagarwal/databazaar is an MCP server listed in the public MCP registry as io.github.shagarwal/databazaar. Search and preview datasets publicly. Account-required full data via MCP. This page covers its npm package (databazaar-mcp).
Is the io.github.shagarwal/databazaar MCP server safe to use?
io.github.shagarwal/databazaar scores 80 out of 100 on VerifyMCP. We recorded 2 known advisories against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.shagarwal/databazaar MCP server expose?
io.github.shagarwal/databazaar exposes 27 tools: search_datasets, get_dataset, preview_sample, find_data_for_task, log_data_gap, and 22 more. Their descriptions and schemas cost roughly 3,193 tokens of context every time the server is loaded.
Is the io.github.shagarwal/databazaar MCP server still maintained?
io.github.shagarwal/databazaar is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.shagarwal/databazaar MCP server under?
io.github.shagarwal/databazaar declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.