Provenance MCP Server
Model Context Protocol server for the Provenance platform — connect AI agents to your provenance data.
Installation
pip install provenance-mcp
Quick Start
Claude Desktop
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):
{
"mcpServers": {
"provenance": {
"command": "provenance-mcp",
"env": {
"PROVENANCE_API_URL": "https://your-api.provenance.dev/api",
"PROVENANCE_API_KEY": "your-api-key"
}
}
}
}
Amazon Q Developer
Add to your Amazon Q MCP config:
{
"mcpServers": {
"provenance": {
"command": "provenance-mcp",
"env": {
"PROVENANCE_API_URL": "https://your-api.provenance.dev/api",
"PROVENANCE_API_KEY": "your-api-key"
}
}
}
}
Cursor / Windsurf / Other MCP Clients
Same pattern — set the command to provenance-mcp and provide the env vars.
Authentication
API Key (default)
provenance-mcp
Set PROVENANCE_API_KEY in your environment or MCP client config.
OAuth2 (client credentials)
provenance-mcp-oauth
Set PROVENANCE_CLIENT_ID and PROVENANCE_CLIENT_SECRET. Tokens auto-refresh on expiry.
Environment Variables
| Variable | Required | Default | Description |
|---|---|---|---|
PROVENANCE_API_URL |
Yes | http://localhost:4000/api |
Provenance API base URL |
PROVENANCE_API_KEY |
Yes* | — | API key for authentication |
PROVENANCE_CLIENT_ID |
Yes** | — | OAuth2 client ID |
PROVENANCE_CLIENT_SECRET |
Yes** | — | OAuth2 client secret |
PROVENANCE_PLATFORM_URL |
No | https://provenance-platform.onrender.com |
Platform URL (OAuth mode) |
* Required for provenance-mcp
** Required for provenance-mcp-oauth
Available Tools
The server exposes 80+ tools covering the full Provenance API:
Core
- query_interactions — Search interactions by resource, action, origin, time range, spanId, parentSpanId
- create_interaction — Record a new provenance event (accepts optional
spanIdandparentSpanIdfor span hierarchy) - search_activity — Advanced multi-filter search
- get_trace — Get full interaction history for a resource
Configuration
- get/create/update/delete_resource_type — Manage resource types
- get/create/update/delete_action — Manage actions
- get/create/update/delete_origin — Manage origins
Analytics
- query_analytics — Run analytics queries with metrics, dimensions, filters
- get_home_dashboard — Get dashboard summary data
- get/create/update/delete_dashboard — Manage dashboards
- get/create/update/delete_widget — Manage dashboard widgets
- get_widget_data — Get rendered widget data
Notifications
- get/create/update/delete_subscriber — Manage notification subscribers
- get/create/update/delete_subscription — Manage event subscriptions
- pause/resume_subscription — Control subscription state
- get_queue_stats / process_queue — Monitor notification queue
Alerting
- get/create/update/delete_interaction_alert — Manage alerts
- get_alert_states / evaluate_alerts — Monitor alert status
- get/create/update/delete_interaction_metric — Manage metrics
- calculate_metric — Calculate metric values
Inbound Webhooks
- get/create/update/delete_inbound_source — Manage webhook sources
- get/create/update/delete_inbound_mapping — Manage payload mappings
- test_inbound_mapping — Test mappings against sample payloads
Secrets
- get/create/update/delete_secret — Manage secrets
- test_secret — Verify secret resolution
- get/create/update/delete_secret_provider — Manage provider connections
Adapters
- get_adapters / get_adapter — Browse notification adapters
- publish_adapter — Publish custom adapters
- get/create/update/delete_adapter_setting — Manage adapter config
Development
git clone https://github.com/stdiolabs/provenance-mcp.git
cd provenance-mcp
pip install -e .
# Run locally
PROVENANCE_API_KEY=your-key provenance-mcp
Related Projects
- Provenance API — Backend REST API
- Provenance UI — Web dashboard
- Provenance CLI — Command-line interface
- Provenance SDK — Node.js SDK
License
MIT — STDIO Labs
Metadata
Release files for provenance-mcp 1.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| provenance_mcp-1.1.0.tar.gz | 12.8 kB | With provenance | Details for provenance_mcp-1.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| provenance_mcp-1.1.0-py3-none-any.whl | Python 3 | none | any | Details for provenance_mcp-1.1.0-py3-none-any.whl |
Total release size: 28.5 kB
Release files / provenance_mcp-1.1.0.tar.gz
| Download URL | provenance_mcp-1.1.0.tar.gz |
|---|---|
| Size | 12.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
59a87318dd09bff16fdee2cb42fc11623029798929cc8a5b130c0c3f431d7719
|
|
BLAKE2b-256 checksum How to use checksums |
1c5ab112a3b97d87132c1f2d21e0a59638cb3f9dbd05b8afea182b0e82f7370a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Apr 21, 2026.
Transparency logRelease files / provenance_mcp-1.1.0-py3-none-any.whl
| Download URL | provenance_mcp-1.1.0-py3-none-any.whl |
|---|---|
| Size | 15.7 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
37b823b0bbe980dcad360a0dcc5943af7e66ebf3fcb5cb3823972e05595817a2
|
|
BLAKE2b-256 checksum How to use checksums |
e25bad28438abc85a28f1253fce1535859131b48c48de0316ecbab3c9a7cec10
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Apr 21, 2026.
Transparency logSecurity for provenance-mcp 1.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for provenance_mcp-1.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Apr 21, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.