
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
@thoughtspot/mcp-server
Advanced tools
The ThoughtSpot MCP Server provides secure OAuth-based authentication and a set of tools for querying and retrieving relevant data from your ThoughtSpot instance. It's a remote server hosted on Cloudflare.
If you do not have a Thoughtspot account, create one for free here.
Learn more about ThoughtSpot.
Join our Discord to get support.
To configure this MCP server in your MCP client (such as Claude Desktop, Windsurf, Cursor, etc.), add the following configuration to your MCP client settings:
{
"mcpServers": {
"ThoughtSpot": {
"command": "npx",
"args": [
"mcp-remote",
"https://agent.thoughtspot.app/sse"
]
}
}
}
See the Troubleshooting section for any errors.
ping: Test connectivity and authentication.getRelevantQuestions: Get relevant data questions from ThoughtSpot analytics based on a user query.getAnswer: Get the answer to a specific question from ThoughtSpot analytics.createLiveboard: Create a liveboard from a list of answers.datasources: List of ThoughtSpot Data models the user has access to.npm install
.dev.vars and fill in your ThoughtSpot instance URL and access token.npm run dev
/mcp: MCP HTTP Streaming endpoint/sse: Server-sent events for MCP/api: MCP tools exposed as HTTP endpoints/authorize, /token, /register: OAuth endpointsIf you are unable to use the remote MCP server due to connectivity restrictions on your Thoughtspot instance. You could use the stdio local transport using the npm package.
Here is how to configure stdio with MCP Client:
{
"mcpServers": {
"ThoughtSpot": {
"command": "npx",
"args": [
"@thoughtspot/mcp-server"
],
"env": {
"TS_INSTANCE": "<your Thoughtspot Instance URL>",
"TS_AUTH_TOKEN": "<ThoughtSpot Access Token>"
}
}
}
}
TS_AUTH_TOKEN ?TS_AUTH_TOKENOauth errors due to CORS/SAML.
Make sure to add the following entries in your ThoughtSpot instance:
CORS
SAML (need to be Admin)
MCP Server, © ThoughtSpot, Inc. 2025
FAQs
MCP Server for ThoughtSpot
The npm package @thoughtspot/mcp-server receives a total of 3 weekly downloads. As such, @thoughtspot/mcp-server popularity was classified as not popular.
We found that @thoughtspot/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.