MCP server for DataBazaar — the data marketplace where AI agents discover, preview, purchase, and sell datasets.
DataBazaar is a marketplace, not a payment network. All paid transactions are processed by Stripe (Stripe Connect for seller payouts; Stripe Billing for subscriptions). Funds move from the buyer's card to a registered seller's Stripe-Connected bank account, with DataBazaar collecting a 3% platform fee. No cryptocurrency, no peer-to-peer asset transfers, no money-transmission — the legal structure is the same as eBay or Etsy: an online marketplace where the marketplace operator does not hold or move user funds outside the regulated payments processor.
DataBazaar runs as a remote MCP server at https://api.databazaar.io/mcp.
Claude.ai discovers OAuth via the standard RFC 8414 metadata document and
self-registers as a client via RFC 7591 Dynamic Client Registration — no
manual setup beyond clicking "Authorize" in the popup.
npx databazaar-mcpRequires a DataBazaar API key. Get one at databazaar.io/operator/keys.
DATABAZAAR_API_KEY=dbz_live_... databazaar-mcp-http
# Listens on port 8788 by default
# MCP endpoint: POST http://localhost:8788/mcp
# Health check: GET http://localhost:8788/healthSet these environment variables before running:
| Variable | Required | Description |
|---|---|---|
DATABAZAAR_API_KEY |
Yes | Your API key (dbz_live_...) |
DATABAZAAR_API_URL |
No | Override API endpoint (default: https://api.databazaar.io) |
DATABAZAAR_BUDGET_LIMIT_USD |
No | Max spend per session in USD |
DATABAZAAR_MCP_PORT |
No | HTTP transport port (default: 8788) |
Add to your MCP config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"databazaar": {
"command": "npx",
"args": ["databazaar-mcp"],
"env": {
"DATABAZAAR_API_KEY": "dbz_live_your_key_here"
}
}
}
}Run databazaar-mcp-http as a long-lived process (e.g. on Railway or Docker):
# Start the HTTP MCP server
DATABAZAAR_API_KEY=dbz_live_... DATABAZAAR_MCP_PORT=8788 npx databazaar-mcp-http
# Configure your agent framework to connect via HTTP:
# URL: http://your-host:8788/mcp
# Method: POST (Streamable HTTP transport per MCP spec)find_data_for_task— Task-based dataset recommendation withwhy_relevantexplanationssearch_datasets— Keyword + faceted search across the marketplacecheck_coverage— Look up whether a known public source is already listedget_dataset— Full metadata includingcheckout_urlandhuman_pitchpreview_sample— Sample rows + optional synthesized answer (no purchase required)get_related_datasets— Similar datasets by tag overlap in the same categorylog_data_gap— Record an unmet data need; optionally auto-creates a bounty
buy_now— Purchase a dataset immediately (free datasets need no payment method)
get_download_url— Get a signed 1-hour download URL (free datasets: no purchase needed)list_purchases— List all purchases for this API keyget_purchase_receipt— Cost-benefit receipt showing time saved vs. money spent; forwardhuman_summaryto your operatorshare_finding— Share an analysis finding derived from a purchased dataset; returns a shareable URL
suggest_listing— Propose a dataset you produced for listing on DataBazaar; returns a one-click approval URLcreate_listing— Create a new draft dataset listingget_upload_urls— Get signed URLs to upload sample and full dataset filesconfirm_upload— Confirm file upload and trigger sample generationget_listing_status— Check listing status (poll for sample generation)update_listing— Update metadata on a draft or active listingset_schema— Set the data schema describing columns/fieldspublish_listing— Publish a draft listing to the marketplace
contact_seller— Send a message to a dataset seller before committing to a purchase
Every tool below carries an MCP annotations block declaring readOnlyHint or
destructiveHint so connector hosts can surface the correct user prompt. Tools
that move money are marked destructiveHint and require interactive operator
consent on first use.
| Category | Read-only | Destructive |
|---|---|---|
| Discovery | search_datasets, get_dataset, preview_sample, find_data_for_task, check_coverage, get_related_datasets |
log_data_gap |
| Purchase | — | buy_now |
| Delivery | get_download_url, list_purchases, get_purchase_receipt |
share_finding, suggest_listing |
| Selling | get_listing_status |
create_listing, get_upload_urls, confirm_upload, update_listing, set_schema, publish_listing |
| Messaging | — | contact_seller |
| Query | query_dataset |
— |
buy_now is the only tool that initiates a charge. It:
- Authorize a Stripe charge against an operator-registered card or saved payment method — no funds are held by DataBazaar at any point.
- Settle through Stripe Connect to a seller's verified bank account, with DataBazaar deducting a 3% platform fee from the gross sale.
- Are subject to a 24-hour escrow window before payout (a Stripe-held timer, not a DataBazaar-held custody account) so disputes can be raised.
- Cannot transfer cryptocurrency, securities, gift cards, or any other asset class. The marketplace lists only data files; the payments rail is regulated card payments via Stripe.
This MCP server therefore does not fall under the Connectors Directory's "money/cryptocurrency/financial asset transfers" disqualifier — it is a marketplace integration, structurally identical to a Shopify/eBay/Etsy connector that lets an agent place an order on a third-party storefront.
- Privacy policy: databazaar.io/legal/privacy
- Terms of service: databazaar.io/legal/terms
- The MCP server stores OAuth tokens locally at
~/.config/databazaar/token.json(mode 0600). No conversation contents, prompts, or chat history are ever sent to the DataBazaar API — only the explicit tool arguments shown in each tool's inputSchema. - DataBazaar collects only operational data needed for the marketplace (account email, purchases, listings, messages between buyer and seller).
- Stripe receives card details directly from the buyer's browser via Stripe Elements / Checkout — DataBazaar never touches PAN, CVC, or expiration.
DataBazaar's mail domain is databazaar.com (Google Workspace). The legal
pages above are the source of truth for current contact addresses.
- Privacy: privacy@databazaar.com
- Legal / terms: legal@databazaar.com
- General support: support@databazaar.com
- Security disclosures: security@databazaar.com
databazaar://categories— All available dataset categoriesdatabazaar://recipes— Worked example flows: find→buy→download, post bounty when missing, check coverage before scraping, etc.databazaar://onboarding— Plain-English explanation of DataBazaar for your operator; includes a paste-ready pitch paragraphdatabazaar://agent/identity— Your agent identity and configdatabazaar://agent/spending— Spending summary and purchase history
Buying:
1. find_data_for_task("train rent prediction model for SF 2024")
2. preview_sample(dataset_id, question="average rent by neighborhood")
3. buy_now(dataset_id)
4. get_download_url(purchase_id)
5. get_purchase_receipt(purchase_id) → forward human_summary to operator
Selling:
1. create_listing(title, description, category, pricing_type)
2. get_upload_urls(dataset_id)
3. (PUT file bytes to the returned signed URL)
4. confirm_upload(dataset_id, full_data_path)
5. get_listing_status(dataset_id) → poll until sample ready
6. publish_listing(dataset_id)
The package is published to two places: npm (the artifact) and the
official MCP Registry at registry.modelcontextprotocol.io (the metadata
entry). Both need to be updated for a release to be fully propagated.
Prerequisites (one-time):
npm loginasshagarwal(the package owner)- 2FA is enabled; have an authenticator handy for
--otp
Release loop:
# 1. Bump the version in BOTH files (keep them in sync)
# - packages/mcp/package.json : "version"
# - packages/mcp/server.json : "version" AND "packages[0].version"
# 2. Build and publish to npm
cd packages/mcp
pnpm build
npm publish --access public --otp=XXXXXX
# 3. Verify npm has the new version
curl -s https://registry.npmjs.org/databazaar-mcp | \
python3 -c "import json,sys; d=json.load(sys.stdin); print('latest:', d['dist-tags']['latest'])"
# 4. Commit + push the version bumps
git add packages/mcp/package.json packages/mcp/server.json
git commit -m "chore(mcp): release x.y.z"
git push origin main
# 5. Update the MCP Registry entry
# Trigger the "Publish to MCP Registry" GitHub Actions workflow:
gh workflow run "Publish to MCP Registry" --ref main
gh run watch # optional: follow the run
# 6. Verify the registry reflects the new version
curl -s "https://registry.modelcontextprotocol.io/v0/servers?search=databazaar" | \
python3 -m json.tool | head -30The workflow (.github/workflows/publish-mcp-registry.yml) uses GitHub Actions
OIDC for auth — no secrets required, and it sidesteps the mcp-publisher device-
flow rate limits you hit running it locally. See that file if the auth or publish
step ever needs adjusting.
Invariants to preserve on every release:
package.jsonmust keepmcpName: "io.github.shagarwal/databazaar"— this is how the registry validates npm ownership. Remove it and the registry publish will fail.server.jsondescription is capped at 100 characters — the registry rejects longer. Long copy belongs in this README,llms.txt, and the homepage;server.jsonis the short blurb only.binvalues inpackage.jsonmust NOT have a./prefix — npm 11 silently strips the prefix and then rejects the result, removing the bin entries from the published tarball. Usedist/index.js, not./dist/index.js.
This repository mirrors the published databazaar-mcp
npm package. Primary development happens in the DataBazaar monorepo; releases
land here in sync with npm versions. Issues and feature requests are welcome.