Atlas / MCP servers / rasinmuhammed / Misata

MisataCAUTION

mcp/rasinmuhammed/misata

Synthetic data that hits the numbers you declare, exactly. Multi-table with verified foreign-key integrity, deterministic, no model in the data path. Python + MCP server. In simple terms, a powerful demo data generator for sales/demos/seed data.

Verdict
CAUTION
Grade
B
Trust score
82 /100
Exposed tools
—
Transport
stdio
License
MIT
Stars
69
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The relational synthetic data engine that satisfies exact business outcomes.

Generate complete multi-table databases with foreign keys that resolve, math that reconciles, and domain-authentic prose with zero Lorem Ipsum. From a single sentence, YAML schema, or live database.

[](https://pypi.org/project/misata/) [](https://pypi.org/project/misata/) [](https://github.com/rasinmuhammed/misata/actions) [](LICENSE) [](https://colab.research.google.com/github/rasinmuhammed/misata/blob/main/notebooks/quickstart.ipynb) [](https://arxiv.org/abs/2606.08736v1) [](https://smithery.ai/servers/misata/misata) [](https://misata.studio)

Prefer a visual interface? Try **Misata Studio** to design schemas on an interactive canvas and generate datasets directly in your browser.

The Paradigm Shift

Most synthetic data tools take existing data and imitate it. But in modern engineering, you rarely have clean data to start with—or you need data designed around a specific target outcome:

  • *"Monthly revenue rises from $50k
Read from source at commit 2b590031ce47OBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (pypi)
claude mcp add misata -- uvx misata==0.9.6.60
03

Trust audit

CAUTIONgrade B · trust 82/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (4 observation(s))
Network
declared (7 observation(s))
Shell
declared (2 observation(s))
Dependencies
pinned
Secrets in source
none-found

Findings (13)

MEDIUMInventory / provenance · inv.binary · CWE-1104
mcpb/misata.mcpb
misata.mcpb
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
research/latex/misata_arxiv_submission.tar.gz
misata_arxiv_submission.tar.gz
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
misata/introspect.py:549
module = importlib.import_module(module_path)
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
misata/lexicon.py:367
"Nimbus Cobalt Ridge Sterling Pinnacle Anchor Beacon Compass Foundry "
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
misata/lexicon.py:372
"Nimbus Cobalt Ridge Sterling Pinnacle Anchor Beacon Compass Foundry "
MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94
misata/research/agent.py:43
print(f"🕵️♂️ [Agent] Mock Researching: {entity_type} in {domain}...")
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
misata/smart_values.py:578
return hashlib.md5(content.encode()).hexdigest()[:12]
LOWNetwork egress · net.beacon_words · CWE-200, CWE-319
examples/network_intrusion_netflow.py:349
exfil_bpp = (dns_exfil["byte_count"] / dns_exfil["packet_count"]).mean()
LOWNetwork egress · net.beacon_words · CWE-200, CWE-319
examples/network_intrusion_netflow.py:351
checks.append((f"dns_exfiltration averages {exfil_bpp:.0f} bytes/packet vs "
LOWNetwork egress · net.beacon_words · CWE-200, CWE-319
examples/network_intrusion_netflow.py:353
exfil_bpp > benign_dns_bpp * 1.5))
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/guides/rest-api.md:14
# Listening on http://0.0.0.0:8000
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table
INFOInventory / provenance · inv.oversize · CWE-1104
public/logo.png
public/logo.png
Why it matters. 1390584 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 2b590031ce47full audit observations/trust-audit/mcp-server/rasinmuhammed__misata.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-072b590031ce47CAUTIONB82first audit
05

Questions

What is the Misata MCP server?

Synthetic data that hits the numbers you declare, exactly. Multi-table with verified foreign-key integrity, deterministic, no model in the data path. Python + MCP server. In simple terms, a powerful demo data generator for sales/demos/seed data.

Is Misata safe to connect to an agent?

With care. The audit graded it B (82/100) and found 13 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Misata need?

It reads AWS_ACCESS_KEY_ID, AWS_BEARER_TOKEN_BEDROCK and GROQ_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Misata run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as misata.

How current is this page?

The grade is for one exact copy of the source (2b590031ce47), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement