io.github.shagarwal/databazaar
NPM · DATABAZAAR-MCP · 2 COMPONENTS · SCANNED SEP 20
Agent-first data marketplace — AI agents search, purchase, and sell datasets via MCP.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 34 of 107 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
- Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 42 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability88
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2478 tokens (~91/item across 27 items; 22 tools + 5 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 94% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 23 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.shagarwal/databazaar MCP server?
io.github.shagarwal/databazaar runs locally as an npm package, launched with npx -y databazaar-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · databazaar-mcp
claude mcp add shagarwal-databazaar -- npx -y databazaar-mcp
{
"mcpServers": {
"shagarwal-databazaar": {
"command": "npx",
"args": [
"-y",
"databazaar-mcp"
]
}
}
} {
"servers": {
"shagarwal-databazaar": {
"command": "npx",
"args": [
"-y",
"databazaar-mcp"
]
}
}
} codex mcp add shagarwal-databazaar -- npx -y databazaar-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"shagarwal-databazaar": {
"type": "local",
"command": [
"npx",
"-y",
"databazaar-mcp"
],
"enabled": true
}
}
} openclaw mcp add shagarwal-databazaar --command npx --arg -y --arg databazaar-mcp
mcp_servers:
shagarwal-databazaar:
command: "npx"
args: ["-y", "databazaar-mcp"] {
"McpServers": {
"shagarwal-databazaar": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"databazaar-mcp"
]
}
}
} assistant mcp add shagarwal-databazaar -t stdio -c npx -a -y databazaar-mcp
{
"mcpServers": {
"shagarwal-databazaar": {
"command": "npx",
"args": [
"-y",
"databazaar-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 −3
- Stability: pass → 0.77 functional
- 14 Sept 26 +1
- Stability: 0.97 → pass security
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 8 Sept 26 −3
- Stability: pass → 0.80 functional
- 7 Sept 26 +1
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/databazaar-mcp@1.3.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 107 packages
| Packages resolved | 107 |
|---|---|
| Stale | 34 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
buy_now ~146
Authorize a one-time purchase of a dataset on the DataBazaar marketplace. Free datasets ($0) require no payment method and are immediately accessible. Paid datasets are charged via Stripe Checkout against the operator's saved card or a payment_method_id. DataBazaar is a marketplace; funds move through Stripe Connect to the seller and the platform fee is 3%. Call preview_sample first to verify the dataset matches the operator's need.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to purchase |
| payment_method_id | string | – | Stripe payment method ID (pm_...). Not needed for free ($0) datasets. Optional for paid datasets if a default card is saved for this operator. |
No output schema declared.
No examples provided.
check_coverage ~118
Check whether a known public data source (e.g. "noaa", "data.gov", "census.gov") is already on DataBazaar. Returns covered=true and matching datasets when the source is available; otherwise log_data_gap can record demand.
| Name | Type | Req | Description |
|---|---|---|---|
| source_name | string | – | Short name of the data source (e.g. "noaa", "census", "data.gov") |
| source_url | string | – | Full URL of the data source (e.g. "https://noaa.gov") — will be normalized |
No output schema declared.
No examples provided.
confirm_upload ~87
Confirm a file has been uploaded to its signed URL and trigger automatic sample generation. Pass the full_data_path returned by get_upload_urls. Poll get_listing_status until the sample is ready before publishing.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The draft dataset ID |
| full_data_path | string | yes | The storage path from get_upload_urls (e.g. "{ownerId}/{datasetId}/full") |
No output schema declared.
No examples provided.
contact_seller ~140
Send a message to a dataset seller to ask questions before purchasing — about freshness, schema details, geographic coverage, or update frequency. Messaging is free and does not require a prior purchase. Sellers typically respond within 24 hours.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | – | The dataset being asked about — helps the seller answer in context |
| message | string | yes | The question for the seller — be specific about what you need to know |
| seller_id | string | yes | The seller user ID — found in the seller field of any dataset response |
| subject | string | yes | Brief subject line, e.g. "Question about SF Rent 2024 dataset" |
No output schema declared.
No examples provided.
create_listing ~157
Create a new draft dataset listing on DataBazaar and return its dataset_id. After creating, use get_upload_urls to upload files, then publish_listing to go live.
| Name | Type | Req | Description |
|---|---|---|---|
| auction_config | object | – | Required for auction or hybrid pricing |
| category | string | – | Category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other |
| description | string | yes | Dataset description |
| price | number | – | Price in USD (required for buy_it_now) |
| pricing_type | string | – | Pricing model (default: free) |
| schema | object | – | Data schema describing columns/fields |
| tags | array | – | Keyword tags for discoverability |
| title | string | yes | Dataset title |
No output schema declared.
No examples provided.
find_data_for_task ~99
Given a free-text research or analysis task, return DataBazaar datasets ranked by relevance. More targeted than search_datasets — each result includes a why_relevant explanation tailored to the task description.
| Name | Type | Req | Description |
|---|---|---|---|
| budget_usd | number | – | Maximum budget in USD — omit to include all price ranges |
| task_description | string | yes | Describe the goal — e.g. "train a model to predict apartment rent in SF using 2024 listings" |
No output schema declared.
No examples provided.
get_dataset ~66
Get full metadata for a specific dataset — schema, column counts, quality score, price anchoring, and a forwardable purchase pitch. Includes a checkout_url for one-click human purchase and a human_pitch field for operator messaging.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to retrieve |
No output schema declared.
No examples provided.
get_download_url ~115
Get a signed, time-limited (1 hour) download URL for a dataset the agent already has access to. For free ($0) datasets, pass dataset_id; for paid datasets, pass purchase_id from a completed buy_now. URLs expire after 1 hour — call again for a fresh one.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | – | Dataset ID — use this for free ($0) datasets. No purchase or API key required. |
| purchase_id | string | – | Purchase ID from buy_now — use this for paid datasets. |
No output schema declared.
No examples provided.
get_listing_status ~52
Get the current status of a listing or draft. Used to poll for sample-generation completion (check sample_file_path or data_profile.auto_sample_status) before publishing.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID |
No output schema declared.
No examples provided.
get_purchase_receipt ~80
Get a cost-benefit receipt for a purchase: price paid, estimated scraping hours saved, and equivalent human-labor cost. The human_summary field is a one-liner suitable for forwarding to the operator (e.g. "$9 spent, ~6h scraping saved").
| Name | Type | Req | Description |
|---|---|---|---|
| purchase_id | string | yes | The purchase ID to generate a receipt for |
No output schema declared.
No examples provided.
get_related_datasets ~74
Given a dataset ID, return similar datasets in the same category ranked by tag overlap. Useful for cross-referencing data, finding alternative sources, or enriching an analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset to find relatives for |
| limit | integer | – | Number of related datasets to return (default 5) |
No output schema declared.
No examples provided.
get_upload_urls ~59
Provision signed upload URLs for a draft listing. Returns URLs for the sample and full dataset files. PUT file bytes directly to the returned upload_url, then call confirm_upload with the returned path.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The draft dataset ID |
No output schema declared.
No examples provided.
list_purchases ~68
List datasets purchased by this agent with status, prices, and download availability. Useful for spending audits, deduplicating before buy_now, or building a purchase summary for the operator.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| status | string | – | Filter by purchase status — omit to see all |
No output schema declared.
No examples provided.
log_data_gap ~115
Record an unmet data need on DataBazaar. When a suggested price is provided, this also creates a bounty listing visible to sellers. Returns a message_for_user string suitable for forwarding to the operator, including the bounty URL.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | yes | Detailed description of the data needed — format, time range, geography, etc. |
| query | string | yes | The search query or data need that returned no results |
| suggested_price_usd | number | – | Suggested bounty price in USD (default $25 if not provided) |
No output schema declared.
No examples provided.
preview_sample ~130
Preview sample rows of a dataset to verify it contains the expected columns, format, and quality. Returns a signed download URL for ~50 rows plus the schema. Pass an optional question to get a synthesized answer from the sample (e.g. "average price in 2024") — no purchase required.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to preview |
| question | string | – | Optional natural-language question to answer from the sample (e.g. "average rent in SF", "count of records per state"). Returns a synthesized_answer field with deterministic aggregates if the questio… |
No output schema declared.
No examples provided.
publish_listing ~69
Publish a draft listing to the marketplace. Requires: full dataset uploaded (get_upload_urls + confirm_upload), sample generation complete (poll get_listing_status), and owner verification. The listing then goes through a content scan before becoming publicly visible.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The draft dataset ID to publish |
No output schema declared.
No examples provided.
query_dataset ~117
Run a structured filter query against a queryable dataset and return matching rows. Useful for extracting a subset without downloading the full dataset. Returns rows as a JSON array (max 10,000 per call).
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset ID to query |
| limit | integer | – | Maximum rows to return (capped at 10,000). |
| select | array | – | Columns to return. Omit to return all columns. |
| where | array | – | Filter clauses combined with AND. Maximum 16 clauses per query. |
No output schema declared.
No examples provided.
search_datasets ~163
Search the DataBazaar marketplace for datasets matching a natural-language query, with optional filters for category, price, quality score, and pricing type. Returns ranked listings with prices, quality scores, and checkout URLs. When results are empty, log_data_gap can post a bounty to signal demand to sellers.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter by category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other |
| limit | integer | – | – |
| max_price | number | – | Maximum price in USD — omit to include all prices |
| min_quality_score | number | – | Minimum quality score (0-10) |
| pricing_type | string | – | – |
| query | string | yes | Natural language search query describing the data needed |
No output schema declared.
No examples provided.
set_schema ~96
Set or update the data schema for a draft listing. Define the columns, types, and descriptions so buyers know what fields the dataset contains.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The draft dataset ID |
| schema | object | yes | Schema object describing columns/fields. Example: { "columns": [{ "name": "id", "type": "integer" }, { "name": "email", "type": "string" }] } |
No output schema declared.
No examples provided.
share_finding ~97
Create a shareable finding record derived from analysis of a DataBazaar dataset. Returns a share_url the operator can send to their team. Public findings also help others discover the underlying dataset.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset_id | string | yes | The dataset used to generate this finding |
| public | boolean | – | Whether to make the finding publicly discoverable (default true) |
| summary | string | yes | 1-3 sentence summary of what was discovered |
No output schema declared.
No examples provided.
suggest_listing ~180
Propose a dataset (e.g. produced as a research byproduct) for listing on DataBazaar. Creates a draft pending approval and returns an approval URL the operator can click to publish. The message_for_user field includes the approval link and suggested price.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | yes | Category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other |
| description | string | yes | What the dataset contains, its source, format, and time range |
| sample_data | string | yes | First ~20 rows of the dataset as a string (CSV or JSON) |
| suggested_price_usd | number | – | Suggested listing price in USD — omit to let the operator decide |
| title | string | yes | Dataset title — clear, searchable, e.g. "NYC Parking Violations 2024 (CSV)" |
No output schema declared.
No examples provided.
update_listing ~95
Update metadata on a draft or active listing.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | New category |
| dataset_id | string | yes | The dataset ID to update |
| description | string | – | New description |
| price | number | – | New price in USD |
| pricing_type | string | – | – |
| schema | object | – | Updated data schema |
| tags | array | – | New tags |
| title | string | – | New title |
No output schema declared.
No examples provided.
What is the io.github.shagarwal/databazaar MCP server?
io.github.shagarwal/databazaar is an MCP server listed in the public MCP registry as io.github.shagarwal/databazaar. Agent-first data marketplace, AI agents search, purchase, and sell datasets via MCP. This page covers its npm package (databazaar-mcp).
Is the io.github.shagarwal/databazaar MCP server safe to use?
io.github.shagarwal/databazaar scores 80 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.shagarwal/databazaar MCP server expose?
io.github.shagarwal/databazaar exposes 22 tools: search_datasets, get_dataset, preview_sample, find_data_for_task, log_data_gap, and 17 more. Their descriptions and schemas cost roughly 2,323 tokens of context every time the server is loaded.
Is the io.github.shagarwal/databazaar MCP server still maintained?
io.github.shagarwal/databazaar is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.shagarwal/databazaar MCP server under?
io.github.shagarwal/databazaar declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.