Rockfish Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Rockfish Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol server that provides tools to interact with the Rockfish AI platform for synthetic data generation, dataset management, and ML workflow orchestration.
Rockfish API — databases, worker sets, workflows, models, projects, datasets, organizations (22+ tools)
SDK (Synthetic Data Generation)
obtain_train_config — generate training configuration with automatic column type detectionupdate_train_config — modify training hyperparameters or field classificationsstart_training_workflow — start TabGAN training workflowget_workflow_logs — stream workflow logs with configurable level and timeoutget_trained_model_id — extract trained model ID from completed workflowstart_generation_workflow — start generation workflow from trained modelobtain_synthetic_dataset_id — extract generated dataset ID from completed workflowplot_distribution — generate distribution plots comparing real and synthetic dataget_marginal_distribution_score — calculate similarity score between real and synthetic dataManta (Analytics & Scenarios) — requires MANTA_API_URL
discover_schema — discover dataset schemagenerate_test_suite — generate test suitesexecute_query / execute_nl_query — run SQL or natural language queriesinject_scenario — inject test scenarios into datasetsrockfish-mcp is not currently published to PyPI, so install it from source (below) and run it with uv run --directory /path/to/rockfish-mcp rockfish-mcp. The uvx rockfish-mcp and pip install rockfish-mcp forms only work once the package is published to an index.
git clone https://github.com/Rockfish-Data/rockfish-mcp.git
cd rockfish-mcpuv.lock, including dev tools):uv sync
source .venv/bin/activate # optional; or prefix commands with `uv run`For a runtime-only install (no dev tools), use uv sync --no-dev.
cp .env.example .env
# Edit .env and add your Rockfish API keyCreate a .env file with your Rockfish API credentials:
ROCKFISH_API_KEY=your_api_key_here
ROCKFISH_API_URL=https://api.rockfish.aiOptional settings:
ROCKFISH_ORGANIZATION_ID=your_organization_id_here
ROCKFISH_PROJECT_ID=your_project_id_here
MANTA_API_URL=https://manta.rockfish.aiAdd to your claude_desktop_config.json:
<details open> <summary>From a source checkout (uv run)</summary>
rockfish-mcp is not published to PyPI, so uvx rockfish-mcp fails with rockfish-mcp was not found in the package registry. Run it from a clone instead. Use uv run --directory rather than uvx --from, so the locked dependencies and the Rockfish SDK find-links index from pyproject.toml are honored. Use the absolute path to uv (which uv), since Claude Desktop does not inherit your shell PATH.
{
"mcpServers": {
"rockfish": {
"command": "/opt/homebrew/bin/uv",
"args": ["run", "--directory", "/path/to/rockfish-mcp", "rockfish-mcp"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}The first launch builds the environment and can take ~30 seconds; later launches are fast. </details>
<details> <summary>Using uvx (requires a published package)</summary>
{
"mcpServers": {
"rockfish": {
"command": "uvx",
"args": ["rockfish-mcp"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}</details>
<details> <summary>Using pip installation (requires a published package)</summary>
{
"mcpServers": {
"rockfish": {
"command": "python",
"args": ["-m", "rockfish_mcp.server"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}</details>
<details> <summary>Using docker</summary>
{
"mcpServers": {
"rockfish": {
"command": "docker",
"args": ["run", "-i", "--rm", "-e", "ROCKFISH_API_KEY", "-e", "ROCKFISH_API_URL", "rockfish-mcp"],
"env": {
"ROCKFISH_API_KEY": "your_api_key_here",
"ROCKFISH_API_URL": "https://api.rockfish.ai"
}
}
}
}</details>
You can use the MCP inspector to debug the server from a source checkout:
npx @modelcontextprotocol/inspector uv run --directory path/to/rockfish-mcp rockfish-mcpOr run the venv's Python directly (after uv sync):
cd path/to/rockfish-mcp
npx @modelcontextprotocol/inspector .venv/bin/python -m rockfish_mcp.serverIf the server fails to start in Claude Desktop, check ~/Library/Logs/Claude/mcp-server-rockfish.log.
Install with dev dependencies (the default for uv sync):
uv syncRun tools with uv run (for example uv run pytest) or activate .venv first.
isort src/rockfish_mcp/ && black src/rockfish_mcp/Unit tests (no credentials required):
pytest tests/test_manta_client.py tests/test_manta_tools.pyIntegration tests (requires .env with real credentials):
pytest tests/
pytest --env=.env.prod.local --html=report.html --self-contained-htmlWe encourage contributions to help expand and improve rockfish-mcp. Whether you want to add new tools, enhance existing functionality, or improve documentation, your input is valuable.
isort and blackFor examples of other MCP servers and implementation patterns, see: https://github.com/modelcontextprotocol/servers
rockfish-mcp is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.