Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.shagarwal/databazaar

NPM · DATABAZAAR-MCP · 3 COMPONENTS

Search and preview datasets publicly. Account-required full data via MCP.

0 this week 80 Trust /100

Last scanned (12 hours ago)

Scores higher than 65% of npm servers

Category Data and Analytics

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security81
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 32 of 104 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability85
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 3348 tokens (~104/item across 32 items; 27 tools + 5 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management98
  • Stability check failed: the tool surface changed between 1.3.0 and 1.5.1: 0 tool removals, 1 breaking changes, 5 additions. See how to fix → Fail
Tool Coverage93
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 79% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 28 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 0
    • Security disclosure: unverified → fail ▼ functional
  • 4 Nov 26 0
    • Security disclosure: fail → unverified ▼ functional
  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 94 to 98.

  • 2 Nov 26 −1

    No change was recorded against any check on this day. Stability & Change Management went from 98 to 94.

  • 29 Oct 26 0
    • CVE-2026-118663 affects this package: high ▼ security
    • Security disclosure: unverified → fail ▼ functional
  • 28 Oct 26 0
    • Security disclosure: fail → unverified ▼ functional
  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 94 to 98.

  • 26 Oct 26 −1

    No change was recorded against any check on this day. Stability & Change Management went from 98 to 94.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/databazaar-mcp@1.5.1

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Vulnerabilities 2 findings
ID CVE Severity Vector Fix available
GHSA-rmxm-3fg6-px4f CVE-2026-118663 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N yes
GHSA-mrhx-c7xc-m3w5 CVE-2023-54404 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 104 packages
Packages resolved 104
Stale 32
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 27 exposed · ~3,193 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
accept_bounty_submission ~89

Explicitly authorize the displayed reward for ONE submission. Multiple winners are allowed unless an optional cap is configured. Seller setup or payment authentication may be required; accepted is true only after funding succeeds. Resume the same submission to continue an existing purchase; never assume selection means payment completed.

NameTypeReqDescription
amount_centsintegeryes–
submission_idstringyes–
versionintegeryes–

No output schema declared.

No examples provided.

buy_now ~146

Authorize a one-time purchase of a dataset on the DataBazaar marketplace. Free datasets ($0) require no payment method and are immediately accessible. Paid datasets are charged via Stripe Checkout against the operator's saved card or a payment_method_id. DataBazaar is a marketplace; funds move through Stripe Connect to the seller and the platform fee is 3%. Call preview_sample first to verify the dataset matches the operator's need.

NameTypeReqDescription
dataset_idstringyesThe dataset ID to purchase
payment_method_idstring–Stripe payment method ID (pm_...). Not needed for free ($0) datasets. Optional for paid datasets if a default card is saved for this operator.

No output schema declared.

No examples provided.

check_coverage ~118

Check whether a known public data source (e.g. "noaa", "data.gov", "census.gov") is already on DataBazaar. Returns covered=true and matching datasets when the source is available; otherwise log_data_gap can record demand.

NameTypeReqDescription
source_namestring–Short name of the data source (e.g. "noaa", "census", "data.gov")
source_urlstring–Full URL of the data source (e.g. "https://noaa.gov") — will be normalized

No output schema declared.

No examples provided.

confirm_upload ~135

Confirm a file has been uploaded to its signed URL and trigger automatic sample generation (drafts only). Pass the full_data_path returned by get_upload_urls and the file format — use format "zip" for archives so the preview is generated from the archive contents. Poll get_listing_status until the sample is ready before publishing.

NameTypeReqDescription
dataset_idstringyesThe draft dataset ID
formatstring–Format of the uploaded file. Strongly recommended — the upload path has no extension.
full_data_pathstringyesThe storage path from get_upload_urls (e.g. "{ownerId}/{datasetId}/full")

No output schema declared.

No examples provided.

contact_seller ~140

Send a message to a dataset seller to ask questions before purchasing — about freshness, schema details, geographic coverage, or update frequency. Messaging is free and does not require a prior purchase. Sellers typically respond within 24 hours.

NameTypeReqDescription
dataset_idstring–The dataset being asked about — helps the seller answer in context
messagestringyesThe question for the seller — be specific about what you need to know
seller_idstringyesThe seller user ID — found in the seller field of any dataset response
subjectstringyesBrief subject line, e.g. "Question about SF Rent 2024 dataset"

No output schema declared.

No examples provided.

create_listing ~284

Create a new draft dataset listing on DataBazaar and return its dataset_id. Set price (USD) or price_cents for a paid listing — omitting both creates a FREE listing. After creating, use get_upload_urls to upload files, then publish_listing to go live.

NameTypeReqDescription
auction_configobject–Required for auction or hybrid pricing
categorystring–Category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other
descriptionstringyesDataset description
documentationobject––
license––Optional custom reuse terms/license name. If this and license_url are blank, accepted listing terms grant Open Use.
pricenumber–Price in USD (e.g. 19). Mutually exclusive with price_cents.
price_centsinteger–Price in integer cents (e.g. 1900 = $19.00). Mutually exclusive with price.
pricing_typestring–Pricing model. Inferred as buy_it_now when a positive price is given; defaults to free only when no price is supplied.
schemaobject–Data schema describing columns/fields. Set { "format": "zip" } when uploading an archive.
tagsarray–Keyword tags for discoverability
titlestringyesDataset title

No output schema declared.

No examples provided.

find_data_for_task ~99

Given a free-text research or analysis task, return DataBazaar datasets ranked by relevance. More targeted than search_datasets — each result includes a why_relevant explanation tailored to the task description.

NameTypeReqDescription
budget_usdnumber–Maximum budget in USD — omit to include all price ranges
task_descriptionstringyesDescribe the goal — e.g. "train a model to predict apartment rent in SF using 2024 listings"

No output schema declared.

No examples provided.

get_bounty_submission ~42

Read an authorized submission, its review version, requirements, feedback, and settlement timeline. Does not expose full unpaid files.

NameTypeReqDescription
submission_idstringyes–

No output schema declared.

No examples provided.

get_dataset ~66

Get full metadata for a specific dataset — schema, column counts, quality score, price anchoring, and a forwardable purchase pitch. Includes a checkout_url for one-click human purchase and a human_pitch field for operator messaging.

NameTypeReqDescription
dataset_idstringyesThe dataset ID to retrieve

No output schema declared.

No examples provided.

get_download_url ~165

Get a signed, time-limited (1 hour) download URL for a dataset the agent already has access to. All full downloads require account authentication. For free ($0) datasets, pass dataset_id; for paid datasets, pass purchase_id from a completed buy_now. URLs expire after 1 hour — call again for a fresh one. When retrieval_url is provided, prefer it for observed delivery and include the same account bearer token only on the DataBazaar API host. A manifest requires choosing files; one file need not be the whole dataset.

NameTypeReqDescription
dataset_idstring–Dataset ID — use this for free ($0) datasets. Account authentication required; no purchase needed.
purchase_idstring–Purchase ID from buy_now — use this for paid datasets.

No output schema declared.

No examples provided.

get_listing_status ~52

Get the current status of a listing or draft. Used to poll for sample-generation completion (check sample_file_path or data_profile.auto_sample_status) before publishing.

NameTypeReqDescription
dataset_idstringyesThe dataset ID

No output schema declared.

No examples provided.

get_purchase_receipt ~80

Get a cost-benefit receipt for a purchase: price paid, estimated scraping hours saved, and equivalent human-labor cost. The human_summary field is a one-liner suitable for forwarding to the operator (e.g. "$9 spent, ~6h scraping saved").

NameTypeReqDescription
purchase_idstringyesThe purchase ID to generate a receipt for

No output schema declared.

No examples provided.

get_related_datasets ~74

Given a dataset ID, return similar datasets in the same category ranked by tag overlap. Useful for cross-referencing data, finding alternative sources, or enriching an analysis.

NameTypeReqDescription
dataset_idstringyesThe dataset to find relatives for
limitinteger–Number of related datasets to return (default 5)

No output schema declared.

No examples provided.

get_upload_urls ~59

Provision signed upload URLs for a draft listing. Returns URLs for the sample and full dataset files. PUT file bytes directly to the returned upload_url, then call confirm_upload with the returned path.

NameTypeReqDescription
dataset_idstringyesThe draft dataset ID

No output schema declared.

No examples provided.

list_bounty_reviews ~61

List submissions the current verified agent is authorized to review, oldest first, with due dates and payment next actions.

NameTypeReqDescription
filterstring––
limitinteger––
offsetinteger––
updated_sincestring––

No output schema declared.

No examples provided.

list_purchases ~68

List datasets purchased by this agent with status, prices, and download availability. Useful for spending audits, deduplicating before buy_now, or building a purchase summary for the operator.

NameTypeReqDescription
limitinteger––
statusstring–Filter by purchase status — omit to see all

No output schema declared.

No examples provided.

log_data_gap ~115

Record an unmet data need on DataBazaar. When a suggested price is provided, this also creates a bounty listing visible to sellers. Returns a message_for_user string suitable for forwarding to the operator, including the bounty URL.

NameTypeReqDescription
descriptionstringyesDetailed description of the data needed — format, time range, geography, etc.
querystringyesThe search query or data need that returned no results
suggested_price_usdnumber–Suggested bounty price in USD (default $25 if not provided)

No output schema declared.

No examples provided.

preview_bounty_submission ~47

Get a temporary URL for the safe submission sample. Review the requirements and sample before authorizing a purchase.

NameTypeReqDescription
bounty_idstringyes–
submission_idstringyes–

No output schema declared.

No examples provided.

preview_sample ~130

Preview sample rows of a dataset to verify it contains the expected columns, format, and quality. Returns a signed download URL for ~50 rows plus the schema. Pass an optional question to get a synthesized answer from the sample (e.g. "average price in 2024") — no purchase required.

NameTypeReqDescription
dataset_idstringyesThe dataset ID to preview
questionstring–Optional natural-language question to answer from the sample (e.g. "average rent in SF", "count of records per state"). Returns a synthesized_answer field with deterministic aggregates if the questio…

No output schema declared.

No examples provided.

publish_listing ~180

Publish a draft listing to the marketplace. Requires: full dataset uploaded (get_upload_urls + confirm_upload), sample generation complete (poll get_listing_status), and owner verification. Requires documentation.source_name and explicit acceptance of the current listing terms: https://databazaar.io/legal/terms#dataset-reuse. Without custom terms, Open Use allows commercial use, modification, redistribution, and model training without attribution. The listing then goes through a content scan before becoming publicly visible.

NameTypeReqDescription
dataset_idstringyesThe draft dataset ID to publish
listing_terms_versionstringyesVersion of listing terms explicitly accepted by the supplier
tos_confirmedbooleanyesConfirm authorization to accept https://databazaar.io/legal/terms#dataset-reuse: absent custom reuse terms, permit commercial use, modification, redistribution and model training without attribution.

No output schema declared.

No examples provided.

query_dataset ~117

Run a structured filter query against a queryable dataset and return matching rows. Useful for extracting a subset without downloading the full dataset. Returns rows as a JSON array (max 10,000 per call).

NameTypeReqDescription
dataset_idstringyesThe dataset ID to query
limitinteger–Maximum rows to return (capped at 10,000).
selectarray–Columns to return. Omit to return all columns.
wherearray–Filter clauses combined with AND. Maximum 16 clauses per query.

No output schema declared.

No examples provided.

review_bounty_submission ~71

Start review, request changes, decline, or extend once. Requires the current review version; a stale version returns a conflict. This tool does not authorize payment.

NameTypeReqDescription
actionstringyes–
reasonstring––
submission_idstringyes–
versionintegeryes–

No output schema declared.

No examples provided.

search_datasets ~188

Search the DataBazaar marketplace for datasets matching a natural-language query, with optional filters for category, price, quality score, and pricing type. Returns ranked listings with prices, quality scores, and checkout URLs. When results are empty, log_data_gap can post a bounty to signal demand to sellers.

NameTypeReqDescription
categorystring–Filter by category: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other
limitinteger––
max_pricenumber–Maximum price in USD — omit to include all prices
min_quality_scorenumber–Minimum assessed sample structure score (0-100); unassessed listings are excluded. See https://databazaar.io/quality for the rubric and limitations.
pricing_typestring––
querystringyesNatural language search query describing the data needed

No output schema declared.

No examples provided.

set_schema ~97

Set or update the data schema for a draft or active listing. Define the columns, types, and descriptions so buyers know what fields the dataset contains.

NameTypeReqDescription
dataset_idstringyesThe dataset ID
schemaobjectyesSchema object describing columns/fields. Example: { "columns": [{ "name": "id", "type": "integer" }, { "name": "email", "type": "string" }] }

No output schema declared.

No examples provided.

share_finding ~97

Create a shareable finding record derived from analysis of a DataBazaar dataset. Returns a share_url the operator can send to their team. Public findings also help others discover the underlying dataset.

NameTypeReqDescription
dataset_idstringyesThe dataset used to generate this finding
publicboolean–Whether to make the finding publicly discoverable (default true)
summarystringyes1-3 sentence summary of what was discovered

No output schema declared.

No examples provided.

suggest_listing ~180

Propose a dataset (e.g. produced as a research byproduct) for listing on DataBazaar. Creates a draft pending approval and returns an approval URL the operator can click to publish. The message_for_user field includes the approval link and suggested price.

NameTypeReqDescription
categorystringyesCategory: geographic, pricing, sensor, images, text, financial, scientific, social, retail, other
descriptionstringyesWhat the dataset contains, its source, format, and time range
sample_datastringyesFirst ~20 rows of the dataset as a string (CSV or JSON)
suggested_price_usdnumber–Suggested listing price in USD — omit to let the operator decide
titlestringyesDataset title — clear, searchable, e.g. "NYC Parking Violations 2024 (CSV)"

No output schema declared.

No examples provided.

update_listing ~293

Update metadata or pricing on a draft OR active listing. The correct API route is chosen from the listing's current status. To change the price of a live listing pass price (USD) or price_cents.

NameTypeReqDescription
categorystring–New category
dataset_idstringyesThe dataset ID to update
descriptionstring–New description
documentationobject––
license––Optional custom reuse terms/license name. If this and license_url are blank, accepted listing terms grant Open Use.
listing_terms_versionstring–Version of listing terms explicitly accepted by the supplier
pricenumber–Price in USD (e.g. 19). Mutually exclusive with price_cents.
price_centsinteger–Price in integer cents (e.g. 1900 = $19.00). Mutually exclusive with price.
pricing_typestring–Pricing model. Inferred as buy_it_now when a positive price is given; defaults to free only when no price is supplied.
schemaobject–Updated data schema
tagsarray–New tags
titlestring–New title
tos_confirmedboolean–Confirm authorization to accept https://databazaar.io/legal/terms#dataset-reuse: absent custom reuse terms, permit commercial use, modification, redistribution and model training without attribution.

No output schema declared.

No examples provided.

Install

How do I install the io.github.shagarwal/databazaar MCP server?

io.github.shagarwal/databazaar runs locally as an npm package, launched with npx -y databazaar-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · databazaar-mcp

# add to Claude Code
claude mcp add shagarwal-databazaar -- npx -y databazaar-mcp
Common questions

What is the io.github.shagarwal/databazaar MCP server?

io.github.shagarwal/databazaar is an MCP server listed in the public MCP registry as io.github.shagarwal/databazaar. Search and preview datasets publicly. Account-required full data via MCP. This page covers its npm package (databazaar-mcp).

Is the io.github.shagarwal/databazaar MCP server safe to use?

io.github.shagarwal/databazaar scores 80 out of 100 on VerifyMCP. We recorded 2 known advisories against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.shagarwal/databazaar MCP server expose?

io.github.shagarwal/databazaar exposes 27 tools: search_datasets, get_dataset, preview_sample, find_data_for_task, log_data_gap, and 22 more. Their descriptions and schemas cost roughly 3,193 tokens of context every time the server is loaded.

Is the io.github.shagarwal/databazaar MCP server still maintained?

io.github.shagarwal/databazaar is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.shagarwal/databazaar MCP server under?

io.github.shagarwal/databazaar declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.