Back to Home
keboola icon

mcp-server

Verified Safe

by keboola

Overview

Connect AI agents and MCP clients to Keboola projects, exposing data, transformations, SQL queries, and job triggers as callable tools without glue code.

Installation

Run Command
python -m keboola_mcp_server

Environment Variables

  • KEBOOLA_STORAGE_API_URL
  • KEBOOLA_MCP_SERVER_CLIENT_ID
  • KEBOOLA_MCP_SERVER_CLIENT_SECRET
  • KEBOOLA_OAUTH_SERVER_URL
  • KEBOOLA_OAUTH_SCOPE
  • KEBOOLA_MCP_SERVER_JWT_SECRET
  • KEBOOLA_MCP_SERVER_MODE
  • KEBOOLA_MCP_SERVER_DEBUG
  • KEBOOLA_MCP_SERVER_WEB_UI_DIR

Security Notes

The server acts as a proxy/bridge, relying heavily on Keboola's underlying API security. OAuth redirect URIs are validated against a whitelist and forbidden schemes. Client secrets are expected to be provided via environment variables, not hardcoded. Direct SQL query execution through the `query_data` tool poses an inherent SQL injection risk if the AI agent constructs malicious queries, though the tool documentation attempts to mitigate this by instructing the agent on safe SQL practices and the backend Keboola Query Service/Storage API provides execution isolation. No obvious usage of `eval` or arbitrary code execution from user input was found in the provided source.

Similar Servers

Stats

Interest Score48
Security Score8
Cost ClassMedium
Avg Tokens2000
Stars81
Forks21
Last Update2025-12-11

Tags

AIKeboolaData IntegrationData PlatformETLData AppsOrchestrationOAuthServerPythonAPI Bridge