Skip to main content

🚀 mcp-server-sigma

CI PyPI Python License: MIT Coverage

Supercharge your AI Agents with native Sigma Computing superpowers!
An enterprise-grade Model Context Protocol (MCP) server with 155 tools covering connections, workbooks, data models, members, teams, deployments, webhooks, multi-tenant operations, and composite workflow recipes straight to your favorite AI assistant.


⚠️ Disclaimers & Safety Warnings

[!IMPORTANT] Community Project Disclaimer
mcp-server-sigma is an independent open-source community project. It is not affiliated with, sponsored by, endorsed by, or supported by Sigma Computing, Inc. "Sigma Computing" is a trademark of Sigma Computing, Inc.

[!WARNING] Credentials & Safety Notice
This server uses API credentials scoped to your Sigma organization. Tools can mutate workbooks, users, teams, and data models.

  • Read-Only Mode: To run safely without mutation risk, set SIGMA_MCP_READONLY=1 (grants 83 read-only tools).
  • Destructive Safety Gates: All single-delete tools require explicit confirm=True. Bulk destructive operations (sigma_bulk_deactivate_members, sigma_bulk_remove_team_members) are disabled by default and require SIGMA_MCP_ALLOW_BULK_DESTRUCTIVE=1.
  • Read SECURITY.md before deploying to production.

💡 Why This Exists

Sigma Computing has a unique architectural asymmetry that shapes how you automate it:

  1. Data Models are 100% Code-Representable: You can programmatically construct data models, define columns, joins, and SQL logic, update JSON specs, and swap warehouse sources via API.
  2. Workbook Layouts are UI-Only: Workbook pages, elements, charts, KPIs, and controls have no direct layout-as-code API.

The canonical path to automated BI dashboards is:
Build the layout once in the Sigma UI, save it as a template, then instantiate and source-swap it programmatically forever after! 🎨 ➡️ 🤖

Our composite recipe tools (like sigma_deploy_template_to_folder and sigma_swap_workbook_sources) automate this exact pattern in a single MCP tool call (returning structured step progress or partial failure details if an intermediate step fails):

graph TD
    UI["Sigma UI"] -->|"1. Build Layout Once & Save"| TPL["Sigma Template"]
    Agent["AI Agent / LLM"] -->|"2. Call sigma_deploy_template_to_folder"| MCP["mcp-server-sigma"]
    MCP -->|"POST /v2/templates/{id}/instantiate"| API1["Instantiate Workbook"]
    MCP -->|"POST /v2/workbooks/{id}/swap_sources"| API2["Swap Warehouse Sources"]
    API2 -->|"Delivered"| Dest["Target Customer Folder"]

📦 Quickstart & Installation

1. Install via pip or uv

pip install mcp-server-sigma
# or with uv
uv pip install mcp-server-sigma

Or run via Docker

docker run --rm -i --env-file .env \
  ghcr.io/christianclaudio/mcp-server-sigma:latest

2. Set Environment Variables

export SIGMA_CLIENT_ID="your-client-id"
export SIGMA_CLIENT_SECRET="your-client-secret"
export SIGMA_API_BASE_URL="https://api.us-a.aws.sigmacomputing.com"

[!TIP] Use the API base URL assigned to your organization's region.

Region Base URL
AWS US East https://api.us-a.aws.sigmacomputing.com
AWS US West https://aws-api.sigmacomputing.com
AWS Canada https://api.ca.aws.sigmacomputing.com
AWS EU https://api.eu.aws.sigmacomputing.com
AWS UK https://api.uk.aws.sigmacomputing.com
AWS Australia https://api.au.aws.sigmacomputing.com
Azure US https://api.us.azure.sigmacomputing.com
Azure EU https://api.eu.azure.sigmacomputing.com
Azure Canada https://api.ca.azure.sigmacomputing.com
Azure UK https://api.uk.azure.sigmacomputing.com
Azure Australia https://api.au.azure.sigmacomputing.com
GCP US https://api.sigmacomputing.com
GCP Saudi Arabia https://api.sa.gcp.sigmacomputing.com

🔌 Integration Guides for AI Assistants & IDEs

mcp-server-sigma works seamlessly with all major AI assistants, IDEs, and CLI tools via standard stdio or streamable-http.

🧡 Claude Desktop & Claude Code

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "sigma": {
      "command": "sigma-mcp",
      "env": {
        "SIGMA_CLIENT_ID": "your-client-id",
        "SIGMA_CLIENT_SECRET": "your-client-secret",
        "SIGMA_API_BASE_URL": "https://api.us-a.aws.sigmacomputing.com"
      }
    }
  }
}

For Claude Code CLI:

claude mcp add sigma -- sigma-mcp
♊ Google Antigravity & Gemini CLI

Add to your project's .agents/mcp_config.json (or global ~/.gemini/config/mcp_config.json):

{
  "mcpServers": {
    "sigma": {
      "command": "sigma-mcp",
      "args": [],
      "env": {
        "SIGMA_CLIENT_ID": "your-client-id",
        "SIGMA_CLIENT_SECRET": "your-client-secret",
        "SIGMA_API_BASE_URL": "https://api.us-a.aws.sigmacomputing.com"
      }
    }
  }
}
🤖 OpenAI Codex & Local HTTP Clients

Run in network transport mode (Streamable HTTP) for local CLI & agent extensions:

# Source environment variables from a protected file or secret manager
source .env

# Launch server on HTTP localhost port 8000 for local clients
sigma-mcp --transport streamable-http --host 127.0.0.1 --port 8000

Point your local Codex / HTTP SSE client to http://127.0.0.1:8000/sse.

Note for hosted ChatGPT Actions or Custom GPTs: Hosted cloud services cannot reach localhost. Place an authenticating HTTPS proxy (e.g., ngrok, Cloudflare Tunnel, or Caddy with TLS and Auth) in front of the server before connecting cloud services.

⚡ VS Code (Cline, Roo Code, GitHub Copilot Agent Mode, Continue)

Cline / Roo Code Settings (cline_mcp_settings.json):

{
  "mcpServers": {
    "sigma": {
      "command": "sigma-mcp",
      "env": {
        "SIGMA_CLIENT_ID": "your-client-id",
        "SIGMA_CLIENT_SECRET": "your-client-secret",
        "SIGMA_API_BASE_URL": "https://api.us-a.aws.sigmacomputing.com"
      }
    }
  }
}

Continue.dev Config (~/.continue/config.yaml):

mcpServers:
  - name: sigma
    command: sigma-mcp
    env:
      SIGMA_CLIENT_ID: "your-client-id"
      SIGMA_CLIENT_SECRET: "your-client-secret"
      SIGMA_API_BASE_URL: "https://api.us-a.aws.sigmacomputing.com"
🐙 GitHub Copilot CLI & Workspace Agent

Add .github/mcp.json to your repository:

{
  "mcpServers": {
    "sigma": {
      "type": "local",
      "command": "sigma-mcp",
      "env": {
        "SIGMA_CLIENT_ID": "${COPILOT_MCP_SIGMA_CLIENT_ID}",
        "SIGMA_CLIENT_SECRET": "${COPILOT_MCP_SIGMA_CLIENT_SECRET}",
        "SIGMA_API_BASE_URL": "https://api.us-a.aws.sigmacomputing.com",
        "SIGMA_MCP_READONLY": "1"
      },
      "tools": ["sigma_get_workbook", "sigma_list_workbooks", "sigma_get_data_model"]
    }
  }
}

Note for Copilot Cloud Agents: Cloud code-review integrations must be configured through Repository Settings > Copilot > MCP servers instead.

❄️ Cortex Code (Snowflake / Enterprise CLI)

Add directly via the Cortex CLI:

cortex mcp add sigma-tools -- sigma-mcp

🛡️ Safety & Security Controls

Configure behavior using environment variables:

Variable Default Description
SIGMA_CLIENT_ID Required Your Sigma API client ID.
SIGMA_CLIENT_SECRET Required Your Sigma API client secret.
SIGMA_API_BASE_URL Required Region-specific Sigma API host URL.
SIGMA_MCP_PROFILE full Tool registration subset: core (36 tools), admin (52), embed (55), full (155).
SIGMA_MCP_READONLY 0 Set 1 to register only read-only tools (83 tools). Models cannot alter org state.
SIGMA_MCP_ALLOW_BULK_DESTRUCTIVE 0 Set 1 to enable bulk deactivate/remove operations (sigma_bulk_deactivate_members, sigma_bulk_remove_team_members) (157 total).
SIGMA_ALLOWED_TENANTS "" Comma-separated allowlist of tenant org IDs permitted for RFC 8693 token exchange.
SIGMA_STRICT_TENANT_ALLOWLIST 0 Set 1 to fail closed (HTTP 403) if a tenant request is made without an explicit allowlist entry.
SIGMA_MCP_LOG_FORMAT text Set json for structured JSON logging with duration metrics (duration_ms).

📊 Feature & Tool Summary

The server registers 155 tools by default across the following domain modules:

Domain Tools Key Capabilities
Workbooks 33 CRUD, pages, elements, columns, queries, sources, swap, lineage, exports, materializations, bookmarks, tags, grants, embeds
Reports 13 CRUD, elements, queries, lineage, exports, schedules, sources, duplication
Data Models 10 CRUD, JSON spec inspection & editing, elements, columns, sources, swap, lineage, tags
Members 10 List, get, create, update, deactivate, teams, bulk deactivate, email change, onboarding
Teams 10 List, get, create, delete, members, bulk assign/remove, user attributes
Connections 7 List, get, schema sync, connectivity test, columns, grants
Multi-Tenant 6 List tenants, tenant info, capabilities, cross-tenant connection sync
Deployments 6 List, get, create, add documents, archive
Templates 6 List, get, instantiate, save from workbook, swap sources, shared templates
Workspaces 6 List, get, create, delete, grants
User Attributes 9 CRUD, user/team/tenant value assignments
Webhooks 6 Webhook subscription management, payload signature validation, event history
Grants 5 Access control lists, workbook/workspace/connection grants
Files & Folders 4 Inode search, create folder, update, delete
Tags 4 List, create, tag workbook, tag data model
Reference 4 sigma_api_capabilities, sigma_formula_pitfalls, sigma_search_docs, sigma_get_doc_page
Composite Recipes 14 High-level multi-step workflow recipes

Note: Domain categories overlap slightly. The 2 bulk-destructive tools (sigma_bulk_deactivate_members, sigma_bulk_remove_team_members) are excluded by default and bring the total to 157 when enabled.


🍳 Composite Workflow Recipes

These high-level tools bundle multi-step API sequences into a single atomic call:

Recipe Tool What It Does
sigma_deploy_template_to_folder Instantiates a template & swaps warehouse sources in 1 call
sigma_materialize_and_wait Triggers a data materialization and polls until complete with timeout
sigma_onboard_member Atomically creates a member and assigns them to multiple teams
sigma_bulk_assign_team_members Batch-adds $N$ members to a team in a single request
sigma_bulk_remove_team_members Resolves member emails and batch-removes them from a team
sigma_bulk_deactivate_members Regex-matches members, generates dry-run report, and deactivates
sigma_bulk_sync_tenant_connections Performs RFC 8693 token exchange per tenant to sync all connections
sigma_copy_workbook_to_member Duplicates a workbook directly into a user's home folder
sigma_promote_workbook Tags a workbook for version promotion (creates tag if missing)
sigma_export_and_download Exports workbook/element, handles 204 polling, returns final content
sigma_sync_all_tables_in_schema Syncs an entire database.schema path across Sigma connections
sigma_reassign_workbook_ownership Bulk-transfers workbook ownership from one member email to another

📐 MCP 2.0 Hints & Safety Annotations

Every tool includes structured MCP hints to assist AI clients with user permission prompts:

Annotation Count Meaning
readOnlyHint=true 83 Indicates intended non-mutation; clients may still require explicit user approval
destructiveHint=true 16 Deletes, deactivates, or revokes; clients should prompt
idempotentHint=true 8 Safe to retry; same input = same outcome
openWorldHint=true 155 All tools hit an external API

🧮 Writing Sigma Formulas

AI models frequently hallucinate SQL or Excel functions when writing Sigma formulas (e.g. using ArrayAgg() instead of List()).
Before writing any Sigma formula, call the built-in reference tool:

# Model prompt helper
Use tool `sigma_formula_pitfalls` to check formula syntax rules.

See docs/formulas.md for full syntax details.


👩‍💻 Local Development & Testing

# Install dev tools
pip install -e ".[dev]"

# Run full test suite with 100% statement line coverage enforcement
pytest --cov=src/sigma_mcp --cov-fail-under=100 --cov-report=term-missing

# Run OpenAPI drift check
python scripts/check_openapi_drift.py

# Run MCP tool contract validation
python scripts/check_tool_contract.py

# Code formatting & type checking
ruff check src/
ruff format --check .
mypy --strict src/

🤝 Contributing & Community

Contributions are welcome! Please read CONTRIBUTING.md for development rules, SECURITY.md for security reporting, and CODE_OF_CONDUCT.md for community standards.


📜 License

MIT License.
Copyright (c) 2026 Christian Claudio.

Disclaimer: Not affiliated with, sponsored by, or endorsed by Sigma Computing, Inc.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mcp_server_sigma-1.0.1.tar.gz (145.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mcp_server_sigma-1.0.1-py3-none-any.whl (83.6 kB view details)

Uploaded Python 3

File details

Details for the file mcp_server_sigma-1.0.1.tar.gz.

File metadata

  • Download URL: mcp_server_sigma-1.0.1.tar.gz
  • Upload date:
  • Size: 145.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/7.0.0 CPython/3.11.2

File hashes

Hashes for mcp_server_sigma-1.0.1.tar.gz
Algorithm Hash digest
SHA256 d14498b92c17a80e41f96a3887877d9b0d6533da2dbe6421d09aef7a825d9164
MD5 b0d5e333184966b98a8699b0b3c7cb65
BLAKE2b-256 c461825be52602dde4fd40ab33cc19eca269cc8dab834a6043b5649f0c9c0643

See more details on using hashes here.

File details

Details for the file mcp_server_sigma-1.0.1-py3-none-any.whl.

File metadata

File hashes

Hashes for mcp_server_sigma-1.0.1-py3-none-any.whl
Algorithm Hash digest
SHA256 bc9dd116eb80ca1c7c7e70200545e0fc8d87e228ba076825e26bbd8891305681
MD5 de170db4302b2c59c3181c87bb6d78b4
BLAKE2b-256 a7266023e61d38e429ae6e0bd31667aaaf6427dc8dac0f93be87f580c84aac0f

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page