Stack · Data science

Data and ML desk

Gets the data out, trains or fine-tunes the model, and evaluates it before anybody calls it an improvement.

Built for: The data scientist who spends more of the week moving files than modelling, and has no evaluation harness.

Install all 11 parts

The button opens the checkout, where the 6 servers and 5 skills are listed one by one. Every member is free, so the checkout lists them and asks for no card.

$0/mo
every member is free — 6 servers and 5 skills
$0
the free-tier version keeps 6 servers and 5 skills — and all 43 tools
$0
5 skills with no monthly cost
89.1k
tokens if every skill file is read in full — a skill loads its description first and the rest only when used
01 · Outcome

What your agent can do with this

The reason to buy a stack rather than five listings: each line below needs more than one member connected at the same time.

  1. 01

    Load a CSV or an Excel file, profile the columns and say what is missing before any modelling starts.

  2. 02

    Query Snowflake read-only, and read the files that never made it into the warehouse from Drive.

  3. 03

    Fine-tune a language or vision model through Hugging Face infrastructure, with the training recipe written down.

  4. 04

    Evaluate an agent or a prompt against a defined harness instead of a demo that happened to work.

02 · Assembly

The assembly, part by part

What each part contributes, and why it was picked over the obvious alternative. Prices and permissions are read from the listings, so nothing here can disagree with the catalogue.

6 servers5 skills43 tools
HU01

The Hugging Face side of the desk: models, datasets and the jobs that run against them.

read/write split not recorded v0.2.33 OAuth · hosted
Free
$0 of the monthly total
DA02

Read-only access to the production database for the features that only exist in the application's own tables.

read/write split not recordedruns on your machine A v0.4.2 API key · runs locally
Free
$0 of the monthly total
SN03

Warehouse queries with key-pair or SSO authentication and no write path, which is the right shape for exploratory work.

5 read2 writeruns on your machine A v1.0.3 credential not declared · runs locally
Free
$0 of the monthly total
GO04

The spreadsheets and exports colleagues send instead of loading, searched and read where they already are. The server can also edit and share them unless it is signed in read-only, as the setup below says.

read/write split not recordedruns on your machine A v2.12.0 · updated 3 weeks ago API key · runs locally
Free
$0 of the monthly total
OP05
Openai MCP server AI & Agents by @mzxrai

A baseline to measure against: the hosted model the fine-tune has to beat to be worth its cost.

1 readread-onlyruns on your machine A v0.1.1 credential not declared · runs locally
Free
$0 of the monthly total
EX06

Statistical analysis and preprocessing over Excel and CSV files, for the preparation work that happens before a notebook.

32 read3 writeruns on your machine A v1.0.2 credential not declared · runs locally
Free
$0 of the monthly total
and the instructions that drive them A skill is a prompt file, not a server: it adds context and a procedure, never a tool or a permission of its own.
DA07
Data Analysis in Jupyter Agent skill by mindrally

Keeps the analysis in pandas, matplotlib and seaborn the way the rest of the field writes it, so the notebook is readable by the next person.

1.2k tokens when loaded in full write access not declared 1 file · Apache-2.0 needs no server of its own
Free
no monthly cost
HU08
Hugging Face LLM Trainer Agent skill by huggingface

Training and fine-tuning through TRL or Unsloth on Hugging Face Jobs, with the recipe recorded rather than remembered.

26.9k tokens when loaded in full write access not declared 19 files · Complete terms in LICENSE.txt needs no server of its own
Free
no monthly cost
DE09
DeepEval Agent skill by confident-ai

The evaluation harness for agents and LLM applications, which is the difference between an improvement and an impression.

14k tokens when loaded in full write access not declared 16 files · Apache-2.0 v1.0.0 needs no server of its own
Free
no monthly cost
HE10
Health Data Agent skill by glebis

A worked example of querying a real personal dataset — an Apple Health SQLite database — in Markdown, JSON or FHIR.

6.3k tokens when loaded in full write access not declared 5 files · MIT needs no server of its own
Free
no monthly cost
PA11
Paper2Code Agent skill by PrathamLearnsToCode

Turns an arXiv paper into a minimal citation-anchored implementation, which is how a method gets tested instead of cited.

40.8k tokens when loaded in full write access not declared 45 files · MIT needs no server of its own
Free
no monthly cost
03 · Cost

What it costs, and on what assumption

Every member is free, so the monthly figure is $0 whatever you do with the stack: nothing here is billed by the call, and only adding a paid member could change it.

PartWhat you are paying forMonthly, as quoted
Hugging Face Free —
Database Postgres Free —
Snowflake Readonly Free —
Google Drive Free —
Openai Free —
Excel Csv Free —
Skills
Data Analysis in Jupyter Free · context cost only —
Hugging Face LLM Trainer Free · context cost only —
DeepEval Free · context cost only —
Health Data Free · context cost only —
Paper2Code Free · context cost only —
Everything above $0 of servers plus $0 of skills, the same in a quiet month and a busy one $0/mo

Subscriptions at their monthly plan price; one-off licences spread over 12 months.

What moves the bill
Flat every month$0 · 0 subscriptions
Carries a call allowancenothing
Paid oncenothing
Traffic assumed5k calls / month

Nothing in this stack carries a call allowance, so nothing here can run out before the month does. The bill is decided when you install it, not when you use it.

The spend cap is one figure for the whole account, set in your dashboard and checked when an order is placed. On the call path what stops a retry loop is the plan's call allowance and its rate limit, and a refused call is never billed.

04 · Setup

Setting it up, in order

The steps below come before the install lines: what to decide and scope before connecting anything, in the order it matters. The lines themselves follow, part by part, for the client you pick.

1
Key-pair or SSO for Snowflake
The read-only server supports key-pair and browser SSO. Use one of them and skip storing a warehouse password anywhere.
2
Sign Drive in read-only
The Drive server can also create, edit and share files, spreadsheets and calendar events. Set GOOGLE_DRIVE_MCP_SCOPES=drive.readonly for its auth step and in its env, and it only searches and reads. It cannot be pointed at one folder; a service account with only the project folder shared is how to keep it there.
3
Set the training budget first
Fine-tuning bills by the hour on somebody else's GPUs. Decide the ceiling before the first job, not after the first invoice.
4
Write the eval before the model
The evaluation skill needs a defined task and dataset. Built afterwards, it measures what the model already does well.
Install, part by part11 parts of 11 in Claude Code

npx mcprush@latest stack add ml-desk writes all 6 servers into Claude Code’s config in one go — or run the lines below one by one. The 5 skills are not included — add them with lines 07–11.

Keys you’ll need
Database Postgres
POSTGRES_HOST — Database host
POSTGRES_USER — Database user (a read-only user is recommended)
POSTGRES_PASSWORD — Database password (or use POSTGRES_PASSWORD_FILE)
POSTGRES_DATABASE — Database name
Snowflake Readonly
SNOWFLAKE_ACCOUNT — Account identifier, e.g. xy12345.us-east-1
SNOWFLAKE_USERNAME — Snowflake user name
SNOWFLAKE_WAREHOUSE — Warehouse to run queries in
SNOWFLAKE_ROLE — Role to use (a read-only role is recommended)
Google Drive
GOOGLE_DRIVE_OAUTH_CREDENTIALS — Path to a Google OAuth 2.0 Desktop app credentials JSON file
Openai
OPENAI_API_KEY — Your OpenAI API key

Set them where you start Claude Code — export POSTGRES_HOST=… in your shell profile on macOS and Linux, setx POSTGRES_HOST "…" on Windows, then open a new terminal. Claude Code reads them at start; the config keeps only the names.

# 01 · Hugging Face claude mcp add --scope user --transport http huggingface-hugging-face-mcp 'https://huggingface.co/mcp?login' # 02 · Database Postgres claude mcp add --scope user --env 'POSTGRES_HOST=${POSTGRES_HOST}' --env 'POSTGRES_USER=${POSTGRES_USER}' --env 'POSTGRES_PASSWORD=${POSTGRES_PASSWORD}' --env 'POSTGRES_DATABASE=${POSTGRES_DATABASE}' --transport stdio database-postgres-mcp '--' npx -y @database-mcp/postgres # 03 · Snowflake Readonly claude mcp add --scope user --env 'SNOWFLAKE_ACCOUNT=${SNOWFLAKE_ACCOUNT}' --env 'SNOWFLAKE_USERNAME=${SNOWFLAKE_USERNAME}' --env 'SNOWFLAKE_WAREHOUSE=${SNOWFLAKE_WAREHOUSE}' --env 'SNOWFLAKE_ROLE=${SNOWFLAKE_ROLE}' --transport stdio snowflake-readonly-mcp '--' npx -y snowflake-readonly-mcp # 04 · Google Drive claude mcp add --scope user --env 'GOOGLE_DRIVE_OAUTH_CREDENTIALS=${GOOGLE_DRIVE_OAUTH_CREDENTIALS}' --transport stdio piotr-agier-google-drive-mcp '--' npx -y @piotr-agier/google-drive-mcp # 05 · Openai claude mcp add --scope user --env 'OPENAI_API_KEY=${OPENAI_API_KEY}' --transport stdio openai-mcp '--' npx -y @mzxrai/mcp-openai # 06 · Excel Csv claude mcp add --scope user excel-csv-mcp '--' npx -y excel-csv-mcp-server # 07 · Data Analysis in Jupyter npx mcprush@latest skill add mindrally/data-analysis-in-jupyter # 08 · Hugging Face LLM Trainer npx mcprush@latest skill add huggingface/hugging-face-llm-trainer # 09 · DeepEval npx mcprush@latest skill add confident-ai/deepeval # 10 · Health Data npx mcprush@latest skill add glebis/health-data # 11 · Paper2Code npx mcprush@latest skill add prathamlearnstocode/paper2code
Requirements and Windows tips
  • Node.js — the current LTS (24) is the safe choice (for npx).
  • Windows PowerShell says 'running scripts is disabled on this system'? Run Set-ExecutionPolicy -Scope CurrentUser RemoteSigned once, or type npx.cmd instead of npx (codex.cmd, gemini.cmd, grok.cmd likewise). PowerShell 7 needs neither.

Nothing is connected until you approve it in Claude Code. mcprush is not in the path and meters nothing here.

Before you start
  • 1 member authorises over OAuth — you are sent to their consent screen once each.
  • 2 members want an API key, set in your own client’s config on your machine — this marketplace never holds it.
  • 3 members have not declared what credential they need — check each one’s own page before you start.
  • What this stack can write is not recorded — 3 members of 6 have no imported tool surface. Section 05 says what is known before you approve anything.
  • 6 members are connected straight from their own package or address — nothing in them goes through mcprush.
05 · Permissions

What the whole stack can reach

Installed together, these tool surfaces add up. It is the first thing a security reviewer asks for, so what has been counted — and what nobody has counted yet — is on the page rather than in a PDF.

—
tools that only read
Which tools read and which write is counted from the surface a publisher imports, and 3 members of 6 have no imported tool surface.
—
tools that can change something
Not recorded, and not estimated: a total added up from the members that have a surface would be read as the whole stack’s. The table below is what is known, member by member.
0
tools that reach the network
43 of the 43 never leave your machine — they belong to the local members.
Who grants the write accessnot recorded
MemberTool surfaceWrite tools
Excel Csv imported 3
Snowflake Readonly imported 2
Database Postgres not imported not recorded
Google Drive not imported not recorded
Hugging Face not imported not recorded
Reading the number

A stack's blast radius is the union of its members, not the worst of them. That union cannot be taken here, because 3 members of 6 have no imported tool surface — so the figure a review asks for is missing rather than low, and a member marked not imported is one nobody has counted rather than one that cannot write.

Tools in total43
Write sharenot recorded
Members that can writeat least 2 of 6
Surface imported3 of 6 members
06 · Swaps

Sensible swaps

A stack is a default, not a verdict. These are the substitutions the maintainer would make, and what each one costs or saves.

For a data lake on S3 rather than a warehouse: the same read-only querying, billed per scan instead of per credit.

same money at 5k calls 5 tools instead of 7 both grade A
07 · Limits

Where this stack stops

Written by the maintainer, kept on the page rather than in a support thread.

  • It cannot deploy a model. Training and evaluation are here; serving is an infrastructure decision this stack does not make.

  • The warehouse connection is read-only. A feature table has to be built by whoever owns the pipeline.

  • It will not tell you a model is good. The evaluation gives numbers against a harness you defined; the threshold is yours.

08 · Maintenance

Who keeps this current

A stack has an owner: whoever keeps it re-checks the combination when a member changes, and the members themselves are published by the people named on each row.

Maintainer
mcprush
The marketplace’s own editors — keep 40 stacks here
Version
—
Not versioned — the curator edits in place
Scanned members
5 of 6
Servers in it that carry a scan grade for the release they serve.
Member trust score
96–100
Lowest to highest client score of its 5 scanned servers, out of 100.
Composition
6 + 5
6 servers, 5 skills
Nearby

Stacks that share parts with this one

All 40 stacks