Rockfish Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Rockfish Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol server that provides tools to interact with the Rockfish AI platform for synthetic data generation, dataset management, and ML workflow orchestration.
Rockfish API — databases, worker sets, workflows, models, projects, datasets, organizations (22+ tools)
SDK (Synthetic Data Generation)
obtain_train_config — generate training configuration with automatic column type detectionupdate_train_config — modify training hyperparameters or field classificationsstart_training_workflow — start TabGAN training workflowget_workflow_logs — stream workflow logs with configurable level and timeoutget_trained_model_id — extract trained model ID from completed workflowstart_generation_workflow — start generation workflow from trained modelobtain_synthetic_dataset_id — extract generated dataset ID from completed workflowplot_distribution — generate distribution plots comparing real and synthetic dataget_marginal_distribution_score — calculate similarity score between real and synthetic dataManta (Analytics & Scenarios) — requires MANTA_API_URL
discover_schema — discover dataset schemagenerate_test_suite — generate test suitesexecute_query / execute_nl_query — run SQL or natural language queriesinject_scenario — inject test scenarios into datasetsWhen using uv no specific installation is needed. We will use uvx to directly run rockfish-mcp.
pip install rockfish-mcpAfter installation, you can run it as a script using:
python -m rockfish_mcp.servergit clone https://github.com/Rockfish-Data/rockfish-mcp.git
cd rockfish-mcp
python3.11 -m venv .venv
source .venv/bin/activateMethod A: Install with dev tools (recommended for contributors):
pip install -e ".[dev]" --find-links https://packages.rockfish.aiMethod B: Install from requirements.txt (exact locked versions):
pip install -r requirements.txtMethod C: Install runtime only (for production):
pip install -e . --find-links https://packages.rockfish.aicp .env.example .env
# Edit .env and add your Rockfish API keyCreate a .env file with your Rockfish API credentials:
ROCKFISH_API_KEY=your_api_key_here
ROCKFISH_API_URL=https://api.rockfish.aiOptional settings:
ROCKFISH_ORGANIZATION_ID=your_organization_id_here
ROCKFISH_PROJECT_ID=your_project_id_here
MANTA_API_URL=https://manta.rockfish.aiAdd to your claude_desktop_config.json:
<details> <summary>Using uvx</summary>
{
"mcpServers": {
"rockfish": {
"command": "uvx",
"args": ["rockfish-mcp"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}</details>
<details> <summary>Using pip installation</summary>
{
"mcpServers": {
"rockfish": {
"command": "python",
"args": ["-m", "rockfish_mcp.server"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}</details>
<details> <summary>Using docker</summary>
{
"mcpServers": {
"rockfish": {
"command": "docker",
"args": ["run", "-i", "--rm", "-e", "ROCKFISH_API_KEY", "-e", "ROCKFISH_API_URL", "rockfish-mcp"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}</details>
For manual installation, add the following JSON block to your User Settings (JSON) file in VS Code. You can do this by pressing Ctrl + Shift + P and typing Preferences: Open User Settings (JSON).
Optionally, you can add it to a file called .vscode/mcp.json in your workspace.
Note that themcpkey is needed when using themcp.jsonfile.
<details> <summary>Using uvx</summary>
{
"mcp": {
"servers": {
"rockfish": {
"command": "uvx",
"args": ["rockfish-mcp"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}
}</details>
<details> <summary>Using pip installation</summary>
{
"mcp": {
"servers": {
"rockfish": {
"command": "python",
"args": ["-m", "rockfish_mcp.server"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}
}</details>
You can use the MCP inspector to debug the server. For uvx installations:
npx @modelcontextprotocol/inspector uvx rockfish-mcpOr if you've installed the package in a specific directory or are developing on it:
cd path/to/rockfish-mcp
npx @modelcontextprotocol/inspector .venv/bin/python -m rockfish_mcp.serverInstall with dev dependencies:
pip install -e ".[dev]" --find-links https://packages.rockfish.aiisort src/rockfish_mcp/ && black src/rockfish_mcp/Unit tests (no credentials required):
pytest tests/test_manta_client.py tests/test_manta_tools.pyIntegration tests (requires .env with real credentials):
pytest tests/
pytest --env=.env.prod.local --html=report.html --self-contained-htmlWe encourage contributions to help expand and improve rockfish-mcp. Whether you want to add new tools, enhance existing functionality, or improve documentation, your input is valuable.
isort and blackFor examples of other MCP servers and implementation patterns, see: https://github.com/modelcontextprotocol/servers
rockfish-mcp is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.