Back to Home
subsetsio icon

subsets-mcp-server

Verified Safe

by subsetsio

Overview

Provides a Model Context Protocol server for AI assistants to query and manage statistical datasets, either remotely from Subsets.io or locally via DuckDB.

Installation

Run Command
uvx --from git+https://github.com/subsetsio/subsets-mcp-server.git mcp-server --api-key YOUR_API_KEY

Environment Variables

  • SUBSETS_API_URL
  • SUBSETS_API_KEY
  • R2_ACCOUNT_ID
  • R2_ACCESS_KEY_ID
  • R2_SECRET_ACCESS_KEY

Security Notes

The server's `execute_sql_query` tool directly executes arbitrary SQL queries provided as a string. While designed for AI-generated queries, this pattern can be a SQL injection vulnerability if the query parameter is not sanitized and comes from an untrusted source, potentially exposing or manipulating loaded datasets. The server relies on fetching and running code directly from a GitHub repository via `uvx`, introducing a supply chain risk if the repository were to be compromised. API keys and R2 credentials are read from files or environment variables, which is good practice.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassMedium
Avg Tokens3000
Stars0
Forks0
Last Update2026-01-07

Tags

AI assistantdata platformstatistical dataDuckDBModel Context Protocol