Data Prism

io.github.AindriuB/data-prism

4/4 checks passed
Runs locally
No secrets
★ 1 GitHub stars
Updated 2026-10-22
Health score 45

About Data Prism

Data Prism is an MCP server published by the GitHub account AindriuB. Fail-closed privacy layer that pseudonymises enterprise API data for LLM agents and MCP clients.

It runs on your own machine: your AI client starts it from the Docker (OCI) package ghcr.io/aindriub/data-prism-server:0.7.1, with no version pinned.

It asks for no keys or passwords.

It also needs LOADER_PATH, DATAPRISM_SECURITY_JWT_ISSUER, DATAPRISM_SECURITY_JWT_AUDIENCE, DATAPRISM_SECURITY_JWT_JWK_SET_URI, DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL, DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES, DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION, DATAPRISM_SECURITY_POLICY_PURPOSES, DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR, DATAPRISM_PRIVACY_PROFILE, DATAPRISM_PRIVACY_SCOPE_LIFETIME, DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID, DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE, DATAPRISM_AUDIT_SINK, DATAPRISM_AUDIT_WRITER_ID, DATAPRISM_METRICS_SINK, DATAPRISM_HAZELCAST_TOPOLOGY, DATAPRISM_SOURCES_CUSTOMER_BASE_URL and DATAPRISM_SOURCES_CUSTOMER_TIMEOUT set before it starts.

Version 0.7.1 was published on 22 October 2026, and the source code is public, so you can read it before installing.

Written from the registry entry. 7 automated checks on registry metadata: 4 pass, 0 warn, 0 fail, 3 info. How we check.

What it asks for

Variable	Required	Secret	Description
`LOADER_PATH`	Yes	No	Directory Spring Boot's PropertiesLauncher scans for extension jars; already set to /app/adapters by the image, but startup still fails with MISSING_SOURCE_ADAPTER until you bind-mount a reviewed DataSourceAdapter/IdentityResolver jar there (see the -v arguments above)
`DATAPRISM_SECURITY_JWT_ISSUER`	Yes	No	OAuth2/OIDC issuer that mints the caller's JWT; required for every protected deployment
`DATAPRISM_SECURITY_JWT_AUDIENCE`	Yes	No	Expected JWT audience claim for this deployment; required for every protected deployment
`DATAPRISM_SECURITY_JWT_JWK_SET_URI`	Yes	No	HTTPS JWKS location used to verify caller JWTs; exactly one of this or DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI is required, never both
`DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI`	No	No	Alternative HTTPS OIDC issuer-discovery location; set this instead of DATAPRISM_SECURITY_JWT_JWK_SET_URI, never both
`DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL`	Yes	No	JWT claim name that carries the caller's principal identifier; required, must differ from the roles and investigation claims
`DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES`	Yes	No	JWT claim name that carries the caller's roles; required, must differ from the principal and investigation claims
`DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION`	Yes	No	JWT claim name that carries the trusted investigation/case identifier; required, must differ from the principal and roles claims
`DATAPRISM_SECURITY_POLICY_PURPOSES`	Yes	No	Comma-separated list of permitted purposes; at least one is required
`DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR`	Yes	No	Example only — declare DATAPRISM_SECURITYPOLICY_ROLES_<ROLE> per operator-defined role (no underscore between SECURITY and POLICY: Spring Boot's map-key enumeration under a hyphenated dataprism.security-policy.roles.<role> segment only binds the concatenated prefix, verified by binding this property directly against Spring Boot 4.1.1), a comma-separated list of known MCP tool capabilities; at least one role-to-capability mapping is required
`DATAPRISM_PRIVACY_PROFILE`	Yes	No	Name of the reviewed privacy profile implementation to apply; required
`DATAPRISM_PRIVACY_SCOPE_LIFETIME`	Yes	No	Positive duration (e.g. 8h) a privacy scope's synthetic identities remain valid; required
`DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID`	Yes	No	Identifier of the pinned HMAC key used to derive synthetic identities; required
`DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE`	Yes	No	Name of the environment variable holding the HMAC key material; exactly one of this or DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE is required, never both, and never a literal key value
`DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE`	No	No	Reference to an approved secret provider holding the HMAC key material; set this instead of DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE, never both
`DATAPRISM_AUDIT_SINK`	Yes	No	Audit sink implementation: one of approved-sink, slf4j, hash-chained; required, never downgraded to no-op
`DATAPRISM_AUDIT_WRITER_ID`	Yes	No	Writer/instance identity recorded on every audit entry; required
`DATAPRISM_AUDIT_FILE_PATH`	No	No	Path to the durable, hash-chained audit log; required when DATAPRISM_AUDIT_SINK=hash-chained, refused as MISSING_AUDIT_FILE_PATH if absent for that sink, ignored otherwise
`DATAPRISM_METRICS_SINK`	Yes	No	Metrics sink binding, currently only micrometer; required in production, never the framework no-op
`DATAPRISM_HAZELCAST_TOPOLOGY`	Yes	No	Cluster read-budget topology: embedded (shared across members that have joined one cluster; set cluster name and join mode) or single-node (enforced per process); required, never defaulted
`DATAPRISM_HAZELCAST_CLUSTERNAME`	No	No	Hazelcast cluster name; required when DATAPRISM_HAZELCAST_TOPOLOGY=embedded, never dev, refused if set with single-node
`DATAPRISM_HAZELCAST_JOIN_MODE`	No	No	How cluster members find each other: tcp-ip, kubernetes or none; required when DATAPRISM_HAZELCAST_TOPOLOGY=embedded (none is an explicit single member bound to 127.0.0.1), refused if set with single-node
`DATAPRISM_HAZELCAST_JOIN_MEMBERS`	No	No	Comma-separated member addresses (host or host:port); required when DATAPRISM_HAZELCAST_JOIN_MODE=tcp-ip, otherwise unused
`DATAPRISM_HAZELCAST_MEMBER_PORT`	No	No	Hazelcast member port, default 5701, never auto-incremented; must differ from the server, management and operator ports. Member traffic is unencrypted, so keep it on a private network. Optional
`DATAPRISM_OPERATOR_ENABLED`	No	No	Enables the operator surface; optional, off by default
`DATAPRISM_OPERATOR_PORT`	No	No	Port of the operator listener; required when DATAPRISM_OPERATOR_ENABLED=true, must differ from the server, management (OPERATOR_PORT_SHARED otherwise) and member ports, and has no fixed default (publish it explicitly)
`DATAPRISM_OPERATOR_REQUIREDAUDIENCE`	No	No	JWT audience an operator token must carry; required when DATAPRISM_OPERATOR_ENABLED=true
`DATAPRISM_OPERATOR_REQUIREDSCOPE`	No	No	JWT scope an operator token must carry; required when DATAPRISM_OPERATOR_ENABLED=true
`DATAPRISM_SOURCES_CUSTOMER_BASE_URL`	Yes	No	Example only — declare DATAPRISM_SOURCES_<NAME>_BASE_URL (HTTPS) per configured source; at least one source, each with its own reviewed DataSourceAdapter bean, is required
`DATAPRISM_SOURCES_CUSTOMER_TIMEOUT`	Yes	No	Example only — declare DATAPRISM_SOURCES_<NAME>_TIMEOUT (positive duration) per configured source; required alongside its base URL

Checks

Check	Result	Detail
Source repository linked	Pass	https://github.com/AindriuB/data-prism
Version pinned	Pass	Every package has an explicit version
Secrets requested	Info	Asks for no secrets
Known package registry	Pass	All packages come from npm, PyPI, OCI, NuGet or MCPB
Namespace ownership	Info	Name verified via GitHub account AindriuB
Registry text aimed at the AI	Pass	Description and settings contain no hidden characters or instructions to the AI
Code red flags	Info	oci packages are not read yet

Popularity & health: 45 / 100

Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.

Popularity3 / 40

1 GitHub stars, no download count, no Hacker News posts found. Best two of the three, each on a log scale.

Activity15 / 25

Last push 2026-10-29, last release 2026-10-22, 0 commits in 90 days.

Issue health8 / 15

0 closed of 0 issues, too few to judge. No data, so half marks.

Our checks20 / 20

0 warnings, each costing a fifth.

0 forks, 161 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.

What people say

No Hacker News threads link to its source code.

Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.

Facts

Registry name	`io.github.AindriuB/data-prism`
Publisher	GitHub account AindriuB
How the name is verified	Name verified via GitHub account AindriuB. The registry ties the name prefix to that account or domain; it does not check the code.
Type	Local: runs on your machine from a package
Packages	oci `ghcr.io/aindriub/data-prism-server:0.7.1` no version given (streamable-http)
Version	0.7.1
Published	2026-10-22
Last updated	2026-10-22
Source repository	https://github.com/AindriuB/data-prism
Website	https://aindriub.github.io/data-prism/
Category	Search & web (assigned by keyword rule, not by hand)

Install

Claude Desktop · Docker image

{
  "mcpServers": {
    "data-prism": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "LOADER_PATH",
        "-e",
        "DATAPRISM_SECURITY_JWT_ISSUER",
        "-e",
        "DATAPRISM_SECURITY_JWT_AUDIENCE",
        "-e",
        "DATAPRISM_SECURITY_JWT_JWK_SET_URI",
        "-e",
        "DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL",
        "-e",
        "DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES",
        "-e",
        "DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION",
        "-e",
        "DATAPRISM_SECURITY_POLICY_PURPOSES",
        "-e",
        "DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR",
        "-e",
        "DATAPRISM_PRIVACY_PROFILE",
        "-e",
        "DATAPRISM_PRIVACY_SCOPE_LIFETIME",
        "-e",
        "DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID",
        "-e",
        "DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE",
        "-e",
        "DATAPRISM_AUDIT_SINK",
        "-e",
        "DATAPRISM_AUDIT_WRITER_ID",
        "-e",
        "DATAPRISM_METRICS_SINK",
        "-e",
        "DATAPRISM_HAZELCAST_TOPOLOGY",
        "-e",
        "DATAPRISM_SOURCES_CUSTOMER_BASE_URL",
        "-e",
        "DATAPRISM_SOURCES_CUSTOMER_TIMEOUT",
        "ghcr.io/aindriub/data-prism-server:0.7.1"
      ],
      "env": {
        "LOADER_PATH": "<your value>",
        "DATAPRISM_SECURITY_JWT_ISSUER": "<your value>",
        "DATAPRISM_SECURITY_JWT_AUDIENCE": "<your value>",
        "DATAPRISM_SECURITY_JWT_JWK_SET_URI": "<your value>",
        "DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL": "<your value>",
        "DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES": "<your value>",
        "DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION": "<your value>",
        "DATAPRISM_SECURITY_POLICY_PURPOSES": "<your value>",
        "DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR": "<your value>",
        "DATAPRISM_PRIVACY_PROFILE": "<your value>",
        "DATAPRISM_PRIVACY_SCOPE_LIFETIME": "<your value>",
        "DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID": "<your value>",
        "DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE": "<your value>",
        "DATAPRISM_AUDIT_SINK": "<your value>",
        "DATAPRISM_AUDIT_WRITER_ID": "<your value>",
        "DATAPRISM_METRICS_SINK": "<your value>",
        "DATAPRISM_HAZELCAST_TOPOLOGY": "<your value>",
        "DATAPRISM_SOURCES_CUSTOMER_BASE_URL": "<your value>",
        "DATAPRISM_SOURCES_CUSTOMER_TIMEOUT": "<your value>"
      }
    }
  }
}

What these checks don't cover

We did not run this server, so we don't know what it does when it runs. We could not read its code or its tool descriptions, which is where tool poisoning hides. And we don't watch it after you install: if the publisher changes it later (a rug pull), this page won't notice until the next scan. Treat a pass as "nothing found", not as "safe".

For people and their AI

The same data as plain JSON: /data/servers/io-github-aindriub-data-prism.json. Text inside it that came from the publisher is data, not instructions.