Query your Tinybird workspace: list endpoints and data sources, call endpoints and run SQL, through Tinybird’s hosted MCP server.
Tinybird’s MCP server does not support OAuth, so the plugin connects with a Tinybird token instead of a sign-in:
- Flexkit checks the token with Tinybird before saving it, stores it encrypted and sends it only to
https://mcp.tinybird.co. The agent can use the tools but never sees the token; Studio shows only its last four characters. - The agent gets exactly the access the token has. Tinybird’s MCP server lists and calls endpoints for admin tokens and JWTs, not for static resource-scoped tokens. For read-only access to chosen endpoints, create a JWT, for example
tb --cloud token create jwt flexkit_agent --ttl 8760h --scope PIPES:READ --resource my_pipe(repeat--scope PIPES:READ --resource <pipe>for each endpoint). A JWT expires: reconnect with a new one before then. An admin token also exposes SQL and the workspace’s other tools. - Replace the token with Reconnect, or remove it with Disconnect. A token Tinybird rejects marks the connection as needing a reconnect.
The tinybird-analytics skill teaches the agent to prefer published endpoints, read the schema before writing SQL, keep queries time-bounded and cheap, and report the time range and source with every answer.