Validate Dashboardbase widget endpoint responses and setup files against the live contract.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows)
Stop guessing whether your dashboard JSON is right. Ask.
This is the official MCP server for dashboardbase. Add it to your AI tool and it can check a widget endpoint's response β or a whole dashboard setup file β against the contract dashboardbase actually enforces, before you ever open the app.
The dashboardbase skill teaches your agent the JSON contract. This MCP lets it check its own work. Use both: the skill gets the shape right, the MCP proves it.
It gives your agent two tools:
| Tool | What it checks |
|---|---|
validate_setup_file | A dashboardbase setup file β the JSON that provisions a whole dashboard's widgets and datasources. Reports errors and warnings with the field, line and column. |
validate_widget_response | The JSON body a widget endpoint returns, against the widget contract. Reports the path and message for each problem. |
Both call the public dashboardbase validation API. No account, no API key, nothing to configure.
Without it β your agent writes an endpoint, you deploy it, you wire it into dashboardbase, the widget shows an error, you go read the docs, you fix it, you deploy again.
With it β your agent writes the endpoint, validates the response, fixes the two things that were wrong, and hands you something that renders the first time.
Download dashboardbase-mcp.mcpb from the latest release and drag it into Claude Desktop's extensions settings. The bundle is self-contained β you don't even need Node.
These use the mcpServers shape. Add it to ~/.cursor/mcp.json (Cursor), ~/.codeium/windsurf/mcp_config.json (Windsurf), or your client's equivalent:
VS Code is the exception β it uses servers rather than mcpServers, and requires an explicit type. In .vscode/mcp.json (workspace) or your user profile:
Codex uses TOML. Easiest is the CLI:
Or by hand in ~/.codex/config.toml:
Requires Node.js 20 or newer β that's the only prerequisite, and only for the npx routes. Nothing else to configure: the validation API is public, so there's no account, key or environment variable to set.
Two different things arrive by two different routes, which is worth knowing:
Better error messages arrive on their own. The server holds no schemas β it calls the live API β so as validation messages improve, you see them immediately. Nothing to update.
New tools need a package update. If a release adds a tool, you get it once the package updates and your client restarts the server. A running server's tool list is fixed for the session.
| How you installed | How you update |
|---|---|
npx (Claude Code, Cursor, VS Code, Windsurf, Codex) | Automatic β restart your client and the next server start picks up the newest version. |
Claude Desktop .mcpb | Pinned at install. Download the new bundle from releases and drag it in again. |
| Docker | docker pull / rebuild the image. |
Check what you're running:
If that reports an older version than the latest release, npm is serving cached registry metadata β a just-published version can take a few minutes to show up. Force it:
Releases follow semver: new tools are a minor bump and never break existing calls, so updating is safe by default.
You should see dashboardbase listed as connected. Inside a Claude Code session, /mcp shows the server and its two tools. In other clients, look for dashboardbase in the MCP or tools panel.
If it isn't there, the server never started β check that node --version is 20 or newer, and that your config file has valid JSON.
You don't call these tools yourself. Describe what you want and the agent decides to call them, the same way it decides to read a file. There's no special syntax and nothing to remember.
Validating something you already have:
.dashboardbase/revenue.json valid?"Validating as part of building:
Debugging something broken:
You: My revenue widget isn't rendering. Check
.dashboardbase/revenue.json.Agent: calls
validate_setup_fileAgent: Two problems β
guageis a typo forgauge, and the second mapping's path is missing its leading slash. Fixing both now.edits the file, calls
validate_setup_fileagain
That loop β validate, fix, re-validate β is the whole point. The agent closes it without you opening dashboardbase.
In Claude Code, the server adds a slash command β type / and it's in the menu:
Leave the path off and it validates whatever you're working on, or whatever you paste next. This is the deterministic route: it doesn't depend on the agent deciding the tool is relevant.
The middle segment comes from the name you installed under. If you ran
claude mcp add dashboardbase β¦it's/mcp__dashboardbase__validate; install it as something else and that segment changes to match.
In clients that don't support MCP prompts, just name the tool in plain language:
Agents sometimes need the nudge the first time; after that they usually pick it up on their own.
| Tool | Arguments | Notes |
|---|---|---|
validate_setup_file | content β the file textpath β read from disk instead | Give one or the other. |
validate_widget_response | response β the endpoint's JSON bodypath β read from disk insteadwidgetType β optional, e.g. kpi | Inferred from the response when widgetType is omitted. |
Two things worth knowing:
path only exists over stdio. A hosted HTTP deployment has no access to your disk, so the parameter isn't offered there β pass content / response instead.validate_widget_response wants the full response body β the title / actions / data / alert envelope your endpoint actually returns, not just the inner data payload.Everything is optional.
| Variable | Default | Purpose |
|---|---|---|
DASHBOARDBASE_API_URL | https://api.dashboardbase.com | Point at a different environment. |
DASHBOARDBASE_API_KEY | unset | Sent as x-api-key. Not needed for the public API. |
DASHBOARDBASE_TIMEOUT_MS | 15000 | Request timeout in milliseconds. |
For containers or a shared internal deployment:
Serves Streamable HTTP at /mcp and a health check at /health. It's fully stateless, so it scales horizontally with no session affinity. Browser origins are refused unless you allowlist them with --allowed-origin https://example.com. The file-reading path parameter is not exposed in this mode.
The server doesn't carry a copy of the schemas β it calls the live dashboardbase validation API. So it can't drift from what the platform accepts, and error messages get better as the API does, with nothing to upgrade on your side.
That applies to the validation rules and messages, not to the server itself β a release that adds a tool still needs a package update. See Staying up to date.
Found a gap or a confusing error? Open an issue. Note that the validation rules themselves live in the dashboardbase backend β if a message is unclear that's still worth reporting here, and we'll fix it upstream.
MIT β see LICENSE. Fork it, adapt it, ship it.
The MIT license covers the code in this repo. "dashboardbase" is a trademark of dashboardbase β see dashboardbase.com. You're free to use and adapt the server; please don't use the name or branding in a way that implies official affiliation.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/dashboardbase)<a href="https://allmcps.com/mcp/dashboardbase"><img src="https://allmcps.com/api/badge/dashboardbase?style=directory" alt="Dashboardbase on AllMCPs" /></a>