Return the authenticated Kaggle username and credential source.

Does not transmit or echo the API key. Use to confirm the server resolved credentials for the expected account.

Health check: credential validity, current per-competition submission budgets for this session, enabled safety switches, and the work-dir root.

Return the session's append-only ledger of mutating actions (submit / create / version / delete) with timestamps and the submission budget at the time — every field redacted. Makes the safety machinery inspectable, which no other Kaggle MCP can offer (none track tokens or budgets).

List/triage competitions as a compact ranked table (title, slug, prize, deadline, evaluation metric, category). Paginated. Read-only.

Pre-digested triage report of competitions: for each, the slug, prize, evaluation metric, deadline, and days_left — sorted by soonest deadline so you can decide what to enter at a glance. A single decision-ready artifact rather than raw endpoint output (which is what other Kaggle MCPs return).

Fetch one competition's details and a truncated, untrusted-wrapped rules digest. competition is the BARE slug (e.g. 'titanic'). Read-only.

Public leaderboard capped to top-N (default 20) to protect context.

Snapshot the public top-N and diff it against the LAST snapshot you took: per-team rank deltas, new entrants, biggest climbers, and (if your_team is given) your movement + who passed you. Kaggle has no historical-leaderboard endpoint, so this stateful local tracking is unique. PUBLIC leaderboard only; deltas are vs your previous snapshot, not an absolute time series.

Download competition data into an isolated work dir (zip auto-extracted with a zip-slip guard). Returns local paths + metadata, NOT file contents. Requires the competition's rules accepted (403 otherwise).

Download a competition's data and return a pre-first-submission view: a compact pandas digest per CSV (shape/dtypes/missingness/correlations) PLUS a train-vs-test column diff that auto-infers the target — the orientation no other Kaggle MCP ships. Requires the competition rules accepted (403 else).

One-call competition kickoff: fetch the metric/deadline/rules, download the data if rules are accepted (otherwise tell you to accept first), run a train/test EDA with target auto-detection, and return a baseline plan plus your remaining submission budget. Collapses the manual setup ritual into a single decision-ready bundle — no other Kaggle MCP does this.

Reduce raw submission history to the decision signal: best public score (respecting metric direction), first/best/latest trend, today's submission count, and any failure reasons — the 'is it worth iterating?' answer other servers leave as a raw list. Public scores only (private score is hidden until the deadline).

There is NO API to accept competition rules (it is a legal agreement). This returns the rules URL and instructs the user to accept it manually in the browser. It NEVER auto-accepts.

Dry-run a submission: validate the file exists/size, report the budget impact, and return a single-use confirm_token required by kaggle_submit_to_competition. No side effects.

Submit a predictions file. GATED: requires a valid confirm_token from kaggle_preview_submission AND available submission budget (~5/day/team). Consumes a daily slot — hard to undo. Returns submission status + remaining budget.

List submission history with status and scores. Read-only.

Poll the newest submission until scoring completes (bounded polling with backoff — NOT a hot loop) and return its public score. Closes the submit loop.

Search datasets; return top ~10 as a compact ranked table (ref, title, downloads, updated, usability) — not raw JSON. Paginated.

Fetch a dataset's metadata + file listing. dataset is 'owner/slug'. Description text is untrusted-wrapped and truncated. Read-only.

Download a dataset (or single file) into an isolated work dir; zip auto-extracted with a zip-slip guard. Returns local paths + metadata.

Download a dataset and return a COMPACT exploratory summary — shape, dtypes, missingness, target distribution, and top numeric correlations — computed locally with pandas. Never streams raw rows into context. This is the 'find data -> understand it' primitive that most Kaggle MCP servers lack (they dump raw files or just emit a prompt). dataset is 'owner/slug'.

Safe first-N-rows preview of a dataset CSV — headers, dtypes, and up to n (<=50) width-capped rows, wrapped as untrusted content. 'What does the data look like?' without dumping the whole file or unbounded rows.

Create a NEW dataset from a local folder. PRIVATE by default. Making it public requires KAGGLE_MCP_ENABLE_PUBLISH=1 AND a confirm_token from a preview. Async — returns 'queued'; poll kaggle_dataset_status. The folder must contain a valid dataset-metadata.json (id, title, licenses).

Issue a confirm_token to publish a dataset publicly. Surfaces that the data WILL become world-visible. No side effects.

Push a new version/revision of an existing dataset from a local folder (persists engineered features across runs). Async; non-destructive (adds a version).

Poll the processing status of a dataset create/version op. Read-only.

Delete a dataset and ALL its versions — IRREVERSIBLE. Disabled unless the server was started with KAGGLE_MCP_ENABLE_DESTRUCTIVE=1, AND requires a confirm_token. Never defaults to yes.

Issue a confirm_token for an irreversible dataset delete. No side effects.

Search/list Kaggle discussion topics. Returns a compact table (title, author, votes, comments, forum, url). READ-ONLY — there is intentionally no post/reply/vote tool (the API has none). Titles are external untrusted text; drill into a thread with kaggle_get_discussion(topic_id).

Search competition SOLUTION write-ups — the post-competition explanations of what actually won. The highest-signal source for strategy research; pairs with the /kaggle-solution-research prompt. Read-only and untrusted-fenced; drill into one with kaggle_get_discussion(topic_id). Powered by the Kaggle 'competition_write_ups' discussion category.

Read a discussion topic's messages. Each message body is fenced as and truncated. READ-ONLY — no reply/comment/vote.

List/search notebooks (kernels) as a compact table. Paginated. Read-only.

Pull a kernel's source (and optionally metadata) into a local work dir. Source code is untrusted-wrapped and truncated. kernel is 'owner/slug'.

Push (create/update AND queue-run) a notebook from a local folder, using Kaggle's free GPU/TPU. Requires a valid kernel-metadata.json. PRIVATE by default (set is_private:true in metadata). Async — poll kaggle_kernel_status.

Poll a kernel run's status (running|complete|error|cancelAcknowledged).

Download a completed kernel's output files and logs into a local work dir. Log tail is untrusted-wrapped and truncated. Read-only fetch.

List/search published models as a compact table. Paginated. Read-only.

Fetch a model's metadata and instances/variations. model is 'owner/slug'. Description is untrusted-wrapped. Read-only.

Download a specific model instance version's artifacts into a work dir. model_version is 'owner/model/framework/variation/version'. Returns paths.

Delete a model — IRREVERSIBLE. Disabled unless KAGGLE_MCP_ENABLE_DESTRUCTIVE=1, and requires a confirm_token from kaggle_preview_delete_model.

Issue a confirm_token for an irreversible model delete. No side effects.