
Mammoth Analytics
io.mammothPublished by mammoth.ioOfficial publisherv0.2.12Updated Nov 4, 2026
Explore, clean, transform and export your Mammoth Analytics data from an AI client.
The publisher's own server: Mammoth Docs
Overview
Mammoth Analytics MCP server that lets an AI client explore, clean, transform and export your Mammoth data as the signed-in user.
- What you can do
- Explore and read Mammoth data through read tools that shape API answers for the model
- Clean and transform data by mapping transformations to pipeline tasks and waiting on the jobs they start
- Work with views, pipelines, files and dashboards through the server's tool modules
- Export data and hand the user links back to the Mammoth web app
- Upload a local file through a short-lived upload page so it can be used in Mammoth
- When to use it
- Use it when your data lives in Mammoth Analytics and you want an AI client such as Claude or ChatGPT to inspect, clean, reshape or export it without leaving the chat. It suits analysts and teams already working inside a Mammoth workspace and project.
- Requirements
- Either the hosted endpoint at mcp.mammoth.io, added to your MCP client with no install, or a local install of the mammoth-mcp-server Python package. Both need a Mammoth account and OAuth sign-in with a workspace and project chosen. A local deployment also needs MCP_ENCRYPTION_KEY (a Fernet key) and a Redis instance via MCP_REDIS_URL, plus Mammoth-side OAuth configuration.
Installation
In SourceWeft
- Open Mammoth Analytics in the dashboard and add it to a workspace.
- Connect the required credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.mammoth%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.
{
"mcpServers": {
"mammoth-analytics": {
"type": "http",
"url": "https://mcp.mammoth.io/mcp"
}
}
}README
mammoth-mcp-server
The Mammoth MCP server. An AI client (Claude, ChatGPT) uses its tools to explore, clean, transform and export data in Mammoth, as the signed-in user.
The server depends on one Mammoth package: the SDK (mammoth-io). Every tool reaches Mammoth
through the API, as the SDK does. The server imports no backend code.
Hosted or local
- Hosted: Mammoth runs this server at
https://mcp.mammoth.io/mcp. Add that URL to your MCP client and sign in with your Mammoth account (OAuth). Nothing to install. - Local:
pip install mammoth-mcp-server, then setMCP_ENCRYPTION_KEYand startmammoth-mcp-server(see From a virtual environment below).MCP_ENCRYPTION_KEYmust be a Fernet key: 32 url-safe base64-encoded bytes. Generate one withpython -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())". The server refuses to start without it, or with a value that is not a Fernet key.
Layout
Settings
Sign-in
This server signs nobody in. Mammoth's own authorization server does: the OAuth server the Mammoth API serves. This server is an OAuth resource server only.
- A client calls
/mcpwith no token. The server answers401and points to/.well-known/oauth-protected-resource/mcp. - That document names Mammoth's authorization server (
MAMMOTH_OAUTH_URL). The client reads the server's metadata there and sends the user to it. - The user signs in to Mammoth, picks a workspace and a project, and approves. The client asks
for a token for this server's URI,
<MCP_SERVER_URL>/mcp(theresourceparameter, RFC 8707). - The client calls
/mcpwith that token. On every request the server asks Mammoth what the token is for (GET /workspaces/current). The server takes the token only when Mammoth says it is live and was issued for this server's URI. - Each tool call goes to the Mammoth API with the same token, so the user's permissions apply.
A token belongs to one workspace. A tool call for another workspace is refused. A Mammoth API token made by hand in Workspace settings was issued for no server, so this server refuses it.
The server keeps no sign-in and no token, with one exception: an upload link holds the caller's token, sealed, in Redis until the user uploads or 30 minutes pass.
What Mammoth needs
- The MCP server's URI,
<MCP_SERVER_URL>/mcp, in mvc-serviceconst.ini, section[oauth], keyMCP_RESOURCES. Mammoth issues a token for no other resource. GET /workspaces/currentmust return the token'sresourcebeside the workspaceid. Without it this server refuses every token.
Before it works in an environment below lists every step, in the order to check them.
Run
As a container, which needs nothing on the host but Docker
The image is built from this repository, so a deployment never waits for a release of the SDK. Build it from the repository root, which is the build context:
With a Redis of its own, as one stack:
The server keeps nothing in memory between requests, so it scales by adding containers. They share only Redis.
From a virtual environment
What deploy/ holds
Before it works in an environment
Each of these stops the sign-in on its own, so check them in order.
-
DNS and the front door point
MCP_SERVER_URLat the server's port.deploy/nginx.example.confholds the server block. -
MCP_ENCRYPTION_KEYis set. It is the only secret this server keeps. Nothing else is required that has no default; see Settings. -
Mammoth knows this server:
MCP_RESOURCES = <MCP_SERVER_URL>/mcp, in mvc-serviceconst.ini, section[oauth]. Mammoth issues a token for no other resource. -
The Mammoth host serves its OAuth metadata where a client looks for it. For an issuer with a path, RFC 8414 puts the document at
/.well-known/oauth-authorization-server/api/v2, and apiv2 serves it at its own path, so the front door has to join the two. The second server block indeploy/nginx.example.confdoes it. Check it with:It must answer the document, not
404. -
The web app's OAuth consent page is deployed. Without it the user lands on a page that does not exist, and approves nothing.
Then a client connects to <MCP_SERVER_URL>/mcp, and the user signs in to
Mammoth and picks a workspace and a project.
Tests
The tests reach no server. The SDK client and the tools are real; only the HTTP transport under the client is replaced.
Source: mammoth-mcp-server/README.md at commit 4e7b528
Tools
0Version history
6- v0.2.12LatestNov 4, 2026
- v0.2.11Nov 4, 2026
- v0.2.9Nov 3, 2026
- v0.2.7Oct 21, 2026
- v0.2.1Oct 13, 2026
- v0.1.1Oct 12, 2026
Score
75% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Declare a license in the repository or the registry entry.