RefineData MCP Server

RefineData MCP is a Model Context Protocol server that gives AI agents (Claude Code, Cursor, ChatGPT) a toolbox for data preparation, anonymization, analysis, and visualization. It leans on Polars and DuckDB so the heavy tools stream data out-of-core instead of loading everything into RAM.

Tools

◐ = the streamable parts of the plan run in chunks; the result is materialized. The PII/toxicity/scraping/viz tools load the working set into memory by design.

Related MCP server: Quack MCP

Installation

Core install (only analyze_data + query_db) is lightweight. Heavy features are optional extras, so you don't pull in PyTorch/spaCy/Matplotlib unless you need them.

python -m venv venv && . venv/Scripts/activate   # Windows
# source venv/bin/activate                       # Linux/Mac

pip install -e .                # core (DuckDB + Polars)
pip install -e ".[scraping]"    # + web scraper
pip install -e ".[viz]"         # + visualizer
pip install -e ".[pii]"         # + PII anonymizer
pip install -e ".[toxicity]"    # + toxicity filter
pip install -e ".[all]"         # everything

If you call a tool whose extra isn't installed, it returns a clear message telling you which pip install to run.

The PII tool also needs a spaCy model:

python -m spacy download en_core_web_sm

Supported Python: 3.11–3.12 (the heavy ML deps don't ship 3.13/3.14 wheels yet).

Configuration for MCP clients

{
  "mcpServers": {
    "RefineDataMCP": {
      "command": "refinedata-mcp",
      "cwd": "/absolute/path/to/refinedata-mcp"
    }
  }
}

refinedata-mcp is installed as a console script. Alternatively use "command": "python", "args": ["-m", "refinedata_mcp"].

Environment variables

Security notes

• The web scraper blocks requests to private/loopback/link-local/metadata IPs (SSRF guard). Override only for trusted local use with REFINEDATA_ALLOW_PRIVATE_URLS=true.

• query_db executes the SQL you pass it and attaches databases read-only by default.

• Set REFINEDATA_WORKDIR to confine file access to a single directory.

• This server is built for a single trusted user (your agent). Do not expose it to untrusted input without adding allow-lists.

Testing

pip install -e ".[dev]"
pytest

Tests for optional features importorskip their dependencies, so the suite runs (skipping what isn't installed) at any install level. See ROADMAP.md for what's done and what's next.