Nimbus BCI
Overview
Description from the maker (original English)
BCI/EEG toolkit: public MOABB/BNCI datasets, pipeline build/validate, hosted training, BIDS export.
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi4 of 4 passedChecked from public information; code not scanned yet
- UsageiEarly↓ 282/wk · ★ 3
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Computer or cloud
- Transport: stdio, Streamable HTTP
- Category: Databases & datasets
- You need to fill in: NIMBUS_TOKEN, NIMBUS_MCP_KEY
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 4 of 4 passed
- Runs on the maker’s server: what you ask it goes through their server.
- Can do 60 things (tools) account.whoami, catalog.nodes, catalog.node_schema, catalog.templates …
- You fill in yourself:
NIMBUS_API_URL,NIMBUS_TOKEN,NIMBUS_TOKEN_FILE,NIMBUS_MCP_KEY,NIMBUS_MCP_KEY_FILE
Values marked secret are keys to your account. Never share them or paste them into a chat.
You need
- Runs in the cloudNothing to install; it connects over the internet
- PyPIPython’s uv installed (for the uvx command)
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
- Open Settings → Connectors
- Press Add custom connector
- Paste the address below and press Add
- If it asks you to sign in, sign in with the maker
https://nimbus-mcp.fly.dev/mcpOr run it on your computer
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"nimbus": {
"command": "uvx",
"args": [
"nimbus-mcp"
],
"env": {
"NIMBUS_API_URL": "your-value",
"NIMBUS_TOKEN": "your-value",
"NIMBUS_TOKEN_FILE": "your-value",
"NIMBUS_MCP_KEY": "your-value",
"NIMBUS_MCP_KEY_FILE": "your-value"
}
}
}
}Run this in your terminal
claude mcp add --transport http nimbus https://nimbus-mcp.fly.dev/mcpOr run it on your computer
claude mcp add nimbus --env NIMBUS_API_URL=your-value --env NIMBUS_TOKEN=your-value --env NIMBUS_TOKEN_FILE=your-value --env NIMBUS_MCP_KEY=your-value --env NIMBUS_MCP_KEY_FILE=your-value -- uvx nimbus-mcpFill in the empty values before running it.
Or copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"nimbus": {
"url": "https://nimbus-mcp.fly.dev/mcp"
}
}
}Or run it on your computer
Or copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"nimbus": {
"command": "uvx",
"args": [
"nimbus-mcp"
],
"env": {
"NIMBUS_API_URL": "your-value",
"NIMBUS_TOKEN": "your-value",
"NIMBUS_TOKEN_FILE": "your-value",
"NIMBUS_MCP_KEY": "your-value",
"NIMBUS_MCP_KEY_FILE": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"nimbus": {
"type": "http",
"url": "https://nimbus-mcp.fly.dev/mcp"
}
}
}Or run it on your computer
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"nimbus": {
"type": "stdio",
"command": "uvx",
"args": [
"nimbus-mcp"
],
"env": {
"NIMBUS_API_URL": "your-value",
"NIMBUS_TOKEN": "your-value",
"NIMBUS_TOKEN_FILE": "your-value",
"NIMBUS_MCP_KEY": "your-value",
"NIMBUS_MCP_KEY_FILE": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
- Open ChatGPT on the web → Settings → Connectors (Apps)
- Press Create or Add (some plans need Developer mode under Advanced first)
- Paste the address below, give it a name and save
- If it asks you to sign in, sign in with the maker
https://nimbus-mcp.fly.dev/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
Values you fill in
NIMBUS_API_URLenvNimbus backend URL. Defaults to the local backend (http://127.0.0.1:8080) — the desktop app and local key flow expect this; use https://nimbus-studio.fly.dev to run against the hosted API.- Hosted API token (nimb_…) minted in Nimbus Studio → Account → API tokens. Not needed if you already ran `nimbus-mcp login`.
NIMBUS_TOKEN_FILEenv- Local-backend key; must match MCP_LOCAL_KEY on your Nimbus backend (dev server) or the desktop app's key.
NIMBUS_MCP_KEY_FILEenvPath to a local-backend key file. The desktop app's mcp-key.json is auto-discovered without this.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Which apps can use it
Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.
Connect over the internet in
ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast
Run on your computer in
ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast
What it can do
Tool names and descriptions exactly as the server reported them on Nov 10, 2026. The maker wrote them, not us; we show them as plain text.
account.whoamiWho you are authenticated as: account email, plan (isPro / pioneer), this month's free-run quota, and — with a hosted token — the token name and days until it expires. Call this first when setup guidance appears or to check which credential a session uses. In anonymous Local Free
catalog.nodesList Nimbus pipeline node types (data, preprocessing, features, models...). Use catalog.node_schema(node_type) for one node's full config schema and ports.
catalog.node_schemaFull config JSON schema + input/output ports for one node type.
catalog.templatesList built-in starter pipelines (MI/P300/SSVEP...). catalog.template(id) returns the graph. Each row carries ``datasetId`` (catalog id, e.g. "BNCI2014_001" — the id catalog.leaderboard and catalog.datasets use) and ``paradigm`` when the template loads a public dataset.
catalog.templateFull template incl. the 'train' execGraph needed by execution.run/pipeline.validate.
catalog.datasetsCurated public EEG datasets (MOABB packs) available to pipelines.
catalog.leaderboardPublic benchmark leaderboard: pipeline rankings per dataset. Two tracks: the top-level ``within_session`` block (curated suite pipelines) and ``crossSubject`` (leave-one-subject-out — curated pipelines plus BYO ``python_model`` submissions; BYO rows carry ``kind: "byo"`` and an `
leaderboard.submitSubmit a BYO python_model to a leaderboard track for server-side scoring. Nimbus scores it server-side under the track's fixed protocol — you submit code, never results. Poll ``leaderboard.status`` with the returned ``submissionId``; scoring takes minutes (classical) to tens of m
leaderboard.statusFetch one of your leaderboard submissions (owner-only). Returns status (queued | scoring | done | failed), metrics when done (meanAccuracyPct + CI, same shape as leaderboard rows), or the error that failed it.
leaderboard.mineList your leaderboard submissions (newest first), all datasets.
pipeline.validateValidate a pipeline graph before running. ExecGraphSnapshot: {nodes: [{id, type, config}], connections: [{from, to}]}. Build it from catalog.template(id).train or from scratch using catalog.nodes().
pipeline.validate_nodeValidate one node's config (schema + semantic checks). Catches the same value errors as pipeline.validate for a single node (inverted bandpass, CSP components vs channel count when dataset is set).
execution.runStart a pipeline run (NON-BLOCKING). Returns executionId — poll with execution.get() until status is completed/failed, then execution.results(). If an identical graph is already running for you, the run still starts but the response carries a ``warning`` + ``duplicateOf`` ids (ca
execution.cancelCancel a running execution.
execution.deletePermanently delete one of your finished runs (completed/failed/cancelled) with its results. Running runs must be cancelled first (409 nimbus.execution.delete_not_terminal). Owner only.
execution.getExecution status summary (status: running/completed/failed/cancelled). Summary fields: ``dataset`` is the human-readable display label (e.g. "BCIIV2a"); ``datasetId`` is the catalog id (e.g. "BNCI2014_001") accepted by other tools (data.inspect_dataset, public_data.dataset). ``ti
execution.listRecent executions. Optional status filter (running/completed/failed/cancelled). Per-run fields: ``dataset`` is the human-readable display label (e.g. "BCIIV2a"); ``datasetId`` is the catalog id (e.g. "BNCI2014_001") accepted by other tools (data.inspect_dataset, public_data.datas
execution.resultsMetrics for a completed run. Trimmed by default (accuracy, kappa, ITR, confusion matrix, per-class); full=True returns the complete result object.
calibration.startStart a guided subject calibration session (NON-BLOCKING; confirm-gated — the device goes on a human's head). The Nimbus Studio app shows the cues on its calibration dashboard automatically; poll calibration.status. Requires a Pro plan (hosted token or Pro session): calibration n
calibration.statusLive snapshot of a calibration session (phase, current trial, progress, paused). Once complete, carries the recorded upload — call calibration.train to turn it into the subject's own classifier.
calibration.pausePause a running calibration between trials (cues hold; resume anytime).
calibration.resumeResume a paused calibration session.
calibration.trainTrain the subject's own classifier from a COMPLETED calibration session (NON-BLOCKING). Fetches the recorded upload, wires it into a train pipeline as a custom_data source, and starts the run. Requires a Pro plan (custom_data training is freemium-gated). The calibrate→train hando
experiment.runRun 1-25 pipelines as ONE paced experiment (NON-BLOCKING). Returns an experimentId immediately; a background thread submits at most 2 runs at a time (min(max_concurrent, 2)), retries queue-full up to 3 times per run, and polls each execution to completion. Poll experiment.get() f
experiment.deleteDelete one of your experiment records (server + this machine's local cache). Its individual runs are kept — delete them with execution.delete. A still-running experiment cannot be deleted.
experiment.getExperiment snapshot: status (running/completed/failed), per-run rows ({name, executionId, status, error?, metrics?, evaluationKind?}) and, once finished, aggregates over completed runs only: per-metric {mean, std, best, n}, plus ``pooledExecutionIds`` / ``pooledRunNames`` / ``kin
execution.artifactsTrained artifacts (models/filters, e.g. *.pkl) saved by an execution.
execution.download_artifactDownload one artifact file. Local/stdio: saved to NIMBUS_EXPORT_DIR/executions/ / and its path returned. Hosted gateway: returned inline as ``contentBase64`` (up to 1 MB of base64); larger files point to Nimbus Studio. Nothing is written on the gateway.
pipeline.exportExport the pipeline as a standalone runnable Python bundle (zip). Local/stdio: the zip is saved under NIMBUS_EXPORT_DIR/exports and its path returned. Hosted gateway: the zip is returned inline as ``contentBase64`` (up to 1 MB of base64). UI-only nodes (interactive_application) a
bids.export_datasetExport a Nimbus dataset as a BIDS-layout zip (local: saved to NIMBUS_EXPORT_DIR/bids/; hosted gateway: inline ``contentBase64``, up to 1 MB). Continuous sources (EDF/BDF uploads, stream recordings) export as BIDS-raw (EDF byte-passthrough; recordings converted HDF5→EDF with event
bids.export_executionExport an execution's results as a BIDS-derivative zip (metrics.json, per-subject participants.tsv, protocol.json, full pipeline_snapshot.json, predictions.tsv when stored, provenance/execution.json). Local: saved to NIMBUS_EXPORT_DIR/bids/. Hosted gateway: inline ``contentBase64
device.listEEG devices supported by this backend (OpenBCI, Muse, BrainBit, LSL, PiEEG...).
device.testTest a device connection WITHOUT starting a stream (safe, no confirm needed).
stream.startConnect an EEG device and START a live streaming session on the user's head. Requires confirm=True; call device.test first. Track with stream.status(). Idle watchdog: if no stream.status()/stream.telemetry() poll happens for idle_timeout_sec (default 900), the session is stopped
stream.statusLive snapshot of a streaming session (running, deviceConnected). Polling this also feeds the idle watchdog: each call resets the session's idle timer (see stream.start's idle_timeout_sec).
stream.stopStop a streaming session and disconnect the device (always safe to call). Also removes the session from the idle watchdog so it cannot fire after an explicit stop.
plots.confusionConfusion-matrix figure for one execution: heatmap with trial counts + per-class accuracy bars, rendered as a PNG the assistant can see. Use it right after execution.results to eyeball WHICH classes are confused, not just the accuracy number.
plots.datasetFigure over an EEG data source — the visual companion to data.inspect_dataset. kind=psd (Welch, channel mean bold), kind=bandpower (channel × band dB heatmap), kind=topomap (band-power scalp map), kind=spectrogram (time-frequency for one channel). Sources are the same ones inspec
plots.erpERP butterfly figure from epoched data: one subplot per class, all channel means (thin) + across-channel mean (bold), time-locked to the trial event. Shows whether class-conditioned evoked structure exists BEFORE training anything.
plots.leaderboardLeaderboard bar chart for one dataset: accuracy with 95% CI whiskers, best first; BYO python_model submissions highlighted in a distinct color. The visual companion to catalog.leaderboard. On the pretrained_few_trial track the figure also includes the classical LOSO baseline as a
stream.telemetryLive snapshot of a streaming session: latest prediction + recent window, signal quality (meanChannelQuality, snrDb, artifactProbability), indicators, running stats. Poll this while a session runs. Works with OR without a deployed model: modelless hardware streams (no classifier)
data.uploadUpload an EEG file (.edf/.bdf/.mat/.csv/.txt/.tsv/.h5/.hdf5, <=500MB) to the backend and get the registered path for a custom_data node. sampling_rate (Hz, e.g. 250.0) is REQUIRED for plain CSV/TSV/TXT files without embedded metadata — uploads without it are rejected (no silent 2
data.delete_uploadDelete an uploaded file from your account (disk + registry). Requires confirm=True. Pass the path returned by data.upload (file.path). Only your own uploads can be deleted; missing paths return not-found.
data.inspect_datasetExploratory summary of a public EEG dataset (MOABB pack): channels, sampling rate, trial/class balance, per-channel µV stats, band powers and a PSD overview. Look at the data BEFORE building pipelines: class balance drives stratification choices (imbalanced classes skew accuracy)
data.inspect_fileExploratory summary of an EEG file (.edf/.bdf/.mat/.csv/.tsv/.txt/.h5): channels, sampling rate, trial/class balance, per-channel µV stats, band powers and a PSD overview. The path shape picks the source: ABSOLUTE path → read the file from disk (only on a LOCAL backend: desktop a
project.createCreate a project (container for one pipeline document). Returns projectId.
project.listList projects owned by the current principal (agent work included).
project.saveSave a pipeline graph into a project (visible on the studio canvas). Always pass expected_revision from the last project.load (or a prior save/create response). When it does not match the current server revision, the save fails with a conflict — it does NOT silently overwrite con
project.loadLoad a project's saved pipeline (train graph + meta) for editing/re-running.
project.renameRename a project you own (max 200 characters).
project.deleteDelete a project (and its saved pipeline document) from the studio workspace. Requires confirm=True: this removes the project from the user's project list. Executions already run from it are not affected. Find ids with project.list.
protocol.validateValidate a neurofeedback protocol document WITHOUT saving it. Returns {valid: true, spec} on success, or {valid: false, errors: [...]} with the per-violation list (loc/msg) when the document is invalid — the verdict is data, never an exception.
protocol.saveValidate and persist the NEXT VERSION of a protocol document (confirm-gated: each call appends a version row; accidental calls clutter the version history). Edits create a new version — the assignment pins the version it runs.
protocol.listEvery saved protocol id at its latest version.
protocol.start_assignmentEnroll a subject and prepare their neurofeedback deploy session (confirm-gated — a session runs on a human). Creates the assignment (yoked sham arms REQUIRE yoked_donor_upload_id: a recorded simulated session's upload — mint one by running an active-arm session and data.upload-in
protocol.session_statusLive snapshot of a protocol deploy session: the scheduler block / session progress + threshold state (under ``protocol``) beside the telemetry window (recent indicators, quality, stats).
protocol.pausePause a running protocol session (blocks freeze; the session and device stay alive — resume with protocol.resume). Simulated and playback sessions only while paused: no data is recorded.
protocol.resumeResume a paused protocol session (restarts the server-driven device loop). Live-hardware resume requires a Pro plan; simulated sessions are free. Pass the session's channel count (start_assignment reports it).
protocol.stopStop a protocol session (always safe to call): stops streaming, saves the block-annotated recording, advances the assignment when the scheduler reached its natural end, and disconnects the device (best-effort — a failed disconnect is reported, never raised).
protocol.export_statsPaired pre/post analysis for one assignment's recorded sessions: per-block aggregates (descriptive + CSV), paired t / Wilcoxon / dz (per-statistic minimums: paired t and Cohen's dz need ≥ 3 completed sessions, Wilcoxon needs ≥ 5), specificity notes, the adaptive-threshold traject
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 11, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account nimbusbci, which owns the repo
- ✓ Pass
Still maintained
Code last changed 6 days ago
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- ✓ Pass
Endpoint responds
Responded in 111 ms (HTTP 200)
- – Not applicable
Sign-in with OAuth
No sign-in needed
- ✓ Pass
No hidden instructions in tool descriptions
Read 60 tool descriptions and found no hidden instructions to the AI
Compared with others in Databases & datasetsi
- More stars than 84% of the other 1161 servers in this category
- Published to the registry more recently than 84% of the other 1161 servers in this category
- Basic checks equal to or better than 100% of the other 1161 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is Nimbus BCI safe?
It passed 4 of 4 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
You need to fill in: NIMBUS_TOKEN, NIMBUS_MCP_KEY
Does it run on my computer or in the cloud?
Either way works: install it on your computer or connect to the cloud version.
Is it still maintained?
The GitHub repo last changed 6 days ago, and the latest version (0.14.21) reached the registry 7 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
What can I use instead?
In the same category: Dbx, MCP Toolbox for Databases, MCP Toolbox for Databases
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database.
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database.
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
nimbus-mcp
MCP server that lets AI agents (Claude Code, Cursor, Claude Desktop) build, validate, run, and analyze Nimbus BCI pipelines — upload their own EEG data, persist pipelines into studio projects, run multi-configuration experiment campaigns on public MOABB/BNCI datasets, render plots, and export BIDS — through your local Nimbus backend or the hosted deployment, with one `nimbus-mcp login`.
Docs: docs.nimbusbci.com · Overview: nimbusbci.com/mcp · Jump to Quickstart
Quickstart (hosted, recommended)
Nothing to install: point your MCP client at the hosted server https://nimbus-mcp.fly.dev/mcp. On first use your client opens a browser sign-in to Nimbus Studio (OAuth) — no token to paste.
Cursor — click the Add to Cursor button above, or put this in .cursor/mcp.json (or ~/.cursor/mcp.json):
{
"mcpServers": { "nimbus": { "url": "https://nimbus-mcp.fly.dev/mcp" } } }
Claude Code:
claude mcp add --transport http nimbus https://nimbus-mcp.fly.dev/mcp
Claude Desktop / claude.ai: Settings → Connectors → *Add custom connector* → URL https://nimbus-mcp.fly.dev/mcp. (Custom connectors may require a paid Claude plan.)
Other clients (streamable HTTP):
{
"mcpServers": { "nimbus": { "type": "http", "url": "https://nimbus-mcp.fly.dev/mcp" } } }
Headless / CI (no browser): OAuth stays the primary path, but the gateway also accepts a Nimbus API key (create one on the Studio Account page) as a Bearer header:
{
"mcpServers": { "nimbus": { "type": "http", "url": "https://nimbus-mcp.fly.dev/mcp", "headers": { "Authorization": "Bearer ${NIMBUS_TOKEN}" } } } }
claude mcp add --transport http nimbus https://nimbus-mcp.fly.dev/mcp \
--header "Authorization: Bearer $NIMBUS_TOKEN"
Try it in 60 seconds
After sign-in, paste this prompt into your agent:
Benchmark a CSP + LDA motor-imagery pipeline on BCI IV 2a (
BNCI2014_001),
show me the confusion matrix, and compare the score to the leaderboard.
You should see the agent call catalog.datasets / catalog.templates, start a run with execution.run, poll execution.get, then show execution.results (accuracy / kappa), a plots.* figure and the catalog.leaderboard comparison — all on public MOABB data, no EEG device needed. The longer guided loop is in examples/demo.md.
The server also ships 5 ready-made MCP prompts (your client lists them as slash commands / prompt templates): mi_csp_lda_bci_iv_2a, compare_mi_pipelines, foundation_backbones, inspect_my_eeg and leaderboard_standing.
Why nimbus-mcp (October 2026 field)
The BCI-MCP niche grew four other servers in 2026. They are honest, focused tools — and each covers a slice of what nimbus-mcp does end-to-end:
| Capability | nimbus-mcp | bci-mcp | eeg-mcp | mne-mcp | ephys-mcp |
|---|---|---|---|---|---|
| Build + validate + run BCI pipelines | ✅ 63 tools | — | — | — | — |
| Train on real data (MOABB packs, uploads) | ✅ | — | — | file I/O only | NWB/DANDI |
Bring-your-own model code (python_model) | ✅ local + cloud sandbox | — | — | — | — |
| Benchmark leaderboard + server-side LOSO scoring | ✅ | — | — | — | — |
| Agent-visible figures (PNG content blocks) | ✅ plots.* | — | — | ✅ | ✅ |
| Modelless live band powers (focus/relaxation) | ✅ stream.telemetry | ✅ | ✅ | — | — |
| Guided subject calibration | ✅ calibration.* | — | — | — | — |
| Neurofeedback protocol sessions | ✅ protocol.* | — | — | — | — |
| BIDS export (sha256 manifests) | ✅ bids.* | — | — | — | — |
| Cluster-aware group statistics | ✅ stats.grouped | — | — | — | partial |
| Transport | stdio + hosted HTTP gateway | stdio + HTTP | stdio | stdio | stdio |
| Validation evidence | arXiv:2610.13894 — parity study, 3 datasets / 6 pipelines / 2 protocols | band-ratio heuristics | — | — | — |
Scope honesty (deliberate non-goals): no stimulation output (eeg-mcp's triple-interlocked send_stim_event is genuinely novel; we don't drive stimulators), no spike/ephys data (ephys-mcp covers intracortical recording — different data plane), no source localization / full MNE parity (mne-mcp is a deep offline MNE wrapper; plots.* covers the figures agents need on Nimbus data).
Install locally (stdio)
Prefer running the server on your own machine (or using your local Studio desktop backend)? Sign in once, then use a secret-free config:
uvx nimbus-mcp login # or: pip install nimbus-mcp && nimbus-mcp login
{
"mcpServers": { "nimbus": { "command": "uvx", "args": ["nimbus-mcp"] } } }
Both uvx nimbus-mcp and python -m nimbus_mcp (inside the env where it is installed) start the stdio MCP server. Agent-oriented install steps (e.g. for Cline): llms-install.md.
(Also installable from the repo: pip install -e nimbus-studio/mcp.)
Zero-hardware demo: examples/demo.md — a copy-paste agent prompt that runs the whole loop (explore → inspect → figures → train → confusion figure → leaderboard → stats) on public MOABB data, no device.
Authentication
Three ways to give the server a credential — tried in this order at startup:
- `nimbus-mcp login` (recommended — hosted API, no token pasting). A device-code login: the command prints a URL and an 8-character code, opens your browser, you approve in Nimbus Studio, and the minted token is stored at
~/.nimbus/credentials.json(0600) and picked up automatically on every future start.
nimbus-mcp login # options: --api-url URL, --ttl-days 7..90, --name NAME
nimbus-mcp status # doctor: credential source, plan, quota, days-to-expiry, live probe nimbus-mcp logout # remove the stored credential
After a login, MCP client configs need no secret at all:
{
"mcpServers": { "nimbus": { "command": "uvx", "args": ["nimbus-mcp"] } } }
- Desktop app — zero config. Just have the Nimbus Studio desktop app running: its local key file is auto-discovered (macOS
~/Library/Application Support/Nimbus Studio/mcp-key.json, Linux~/.config/Nimbus Studio/…, Windows%APPDATA%\Nimbus Studio\…) and the server talks to the local backend athttp://127.0.0.1:8080. Nothing to paste or configure.
- Environment variables (advanced / CI).
NIMBUS_TOKEN(a hosted API tokennimb_…minted in Nimbus Studio → Account → API tokens) orNIMBUS_TOKEN_FILE(a 0600 JSON file{"token": "…"}— keeps the secret out of process env and MCP configs), or the local pairNIMBUS_MCP_KEY/NIMBUS_MCP_KEY_FILE(must matchMCP_LOCAL_KEYon a local backend — see below). Explicit env always beats files on disk. ANIMBUS_TOKEN/NIMBUS_TOKEN_FILEtoken withNIMBUS_API_URLunset talks to the hosted API (https://nimbus-studio.fly.dev); setNIMBUS_API_URLto point it anywhere else.
No credential anywhere? That is the Local Free tier — it works. The server starts anonymously against the local backend (desktop app or dev backend on http://127.0.0.1:8080): templates, your own data, local execution/plots/stats, BIDS export and local-only storage need no Nimbus Studio login at all. Login is requested only at first *cloud* value — a tool that needs an identity (leaderboard submission, verified/cross-machine experiment history, hosted compute, cloud sync, collaboration) returns {ok: false, loginRequired: true, trigger, reason, howToAuthenticate} naming exactly why, instead of a blanket gate. Hosted Pro features (verified leaderboard submissions, foundation.compare, big campaigns, team features) return {ok: false, tierGate: true, requiredTier: "pro"} on free accounts; exports (BIDS etc.) are never gated at any tier. If a local call fails because no local backend/identity exists, the response is the local-mode variant of {ok: false, setupRequired: true, message, options} (start the desktop app / set a dev key — still no login). A hosted token rejected mid-session (expired or revoked) returns the classic setup shape, including how many days ago it expired.
Checking who you are
account.whoami() → {userId, email, plan: {isPro, pioneerAccess},
freeRuns: {monthlyLimit, remaining}, token: {name, kind, scopes, fullAccess, expiresAt, daysLeft} | {masked, kind, scopes, fullAccess, expiresAt, daysLeft} # gateway header token | null, source} # store | env | token_file | header | …
Call account.whoami() from the agent to see the account, plan, this month's free-run quota, and (in token mode) the token's days-to-expiry; nimbus-mcp status is the terminal equivalent with a live backend probe.
What a hosted token means
- The token IS you. Requests run under your account: executions appear in your studio history and your plan's quotas and limits apply — there is no separate agent allowance. When the free monthly quota is exhausted, run errors carry the upgrade link
https://studio.nimbusbci.com/pricing?reason=mcp-quota. - CPU-only in v0.4. Token-authenticated runs do not hydrate cloud GPUs.
- Rotation. Tokens live at most 90 days (30 by default). Plan changes are snapshotted at mint time — after an upgrade, re-login (or revoke and re-create the token) to pick up the new plan. An expired token surfaces as setup guidance with the day count, not a dead end.
Headless agents and CI (API keys)
For CI pipelines and unattended agents, mint a CI key in Nimbus Studio → Account → API tokens: choose type CI / headless, a lifetime of 90, 180 or 365 days, and pick its scopes. CI keys are a Pro feature (Pro plan or Pioneer access); Free accounts can still use personal tokens.
| Scope | Allows |
|---|---|
read | GET/list/describe, plus compute-only POSTs (validate, plots, stats, export) |
run | start/cancel executions and experiments (consumes your quota) |
write | create/update/delete projects, pipelines, uploads, settings |
leaderboard:submit | leaderboard submissions |
CI keys default to read + run; a full-access CI key is an explicit choice (the Full access checkbox, or "fullAccess": true on POST /api/me/api-tokens). Personal tokens keep the old default: no scope selected = full access, and every token minted before scopes existed keeps working unchanged. The backend enforces scopes on every request; a missing scope answers 403 nimbus.auth.token_scope_insufficient. account.whoami and nimbus-mcp status show the key's kind, scopes and days left.
Store the key as a CI secret and pass it as NIMBUS_TOKEN (no NIMBUS_API_URL needed — a token defaults to hosted Nimbus). GitHub Actions example:
- name: Nimbus smoke run
env: NIMBUS_TOKEN: ${{ secrets.NIMBUS_CI_KEY }} run: | pipx install nimbus-mcp nimbus-mcp status # fails fast if the key is expired or revoked
Or call the hosted gate