MCP Observatory
6m ago Tracked 56,789 Last 6m ago 24h 2,390
github TypeScript analyzed 751ce63

cyanheads/cdc-health-mcp-server

github

Search and query CDC public health data — mortality, vaccinations, surveillance, behavioral risk (Socrata SODA API) via MCP. STDIO or Streamable HTTP.

maintainer
cyanheads
licence
Apache-2.0
first seen
2026-06-04
last seen
2026-08-23
releases · 30d
2
short id

Drift inferred · capture-to-capture

tool count over time

06-13 13:27 now
3t
12t
capabilities 4 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 4 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • cdc_discover_datasets
  • cdc_get_dataset_schema
  • cdc_query_dataset
  • cdc_query_wonder
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 751ce63 · analyzer v33 · 1d ago

skills & prompt files 33

code evidence vv0.8.6 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 57

filesystem 17

  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/build-changelog.ts :32 import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/build.ts :17 import { readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/check-dependency-specifiers.ts :38 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/check-docs-sync.ts :22 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/check-framework-antipatterns.ts :39 import { existsSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/check-skill-versions.ts :33 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/check-skills-sync.ts :37 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/clean-mcpb.ts :29 import { existsSync, statSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/clean.ts :15 import { readdir, rm } from 'node:fs/promises';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/devcheck.ts :3 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/lint-mcp.ts :19 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/lint-packaging.ts :52 import { existsSync, readdirSync, readFileSync } from 'node:fs';
show 5 more
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/list-skills.ts :21 import { existsSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/release-github.ts :33 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/split-changelog.ts :24 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/tree.ts :24 import type { Dirent } from 'node:fs';
  • fs (weak) cyanheads-cdc-health-mcp-server-751ce63/tests/services/socrata/socrata-contract-parity.test.ts :7 import { readFileSync } from 'node:fs';

shell / exec 7

  • shell (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/build.ts :16 import { execFile } from 'node:child_process';
  • shell (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/check-framework-antipatterns.ts :38 import { spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/check-skill-versions.ts :32 import { spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/clean-mcpb.ts :28 import { execFileSync } from 'node:child_process';
  • shell (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/devcheck.ts :2 import { type ChildProcess, spawn, spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/lint-packaging.ts :51 import { execFileSync } from 'node:child_process';
  • shell (weak) cyanheads-cdc-health-mcp-server-751ce63/scripts/release-github.ts :32 import { spawnSync } from 'node:child_process';

network 3

  • net cyanheads-cdc-health-mcp-server-751ce63/src/services/socrata/socrata-service.ts :296 const response = await globalThis.fetch(url, {
  • net cyanheads-cdc-health-mcp-server-751ce63/src/services/wonder/wonder-service.ts :50 .fetch(`${WONDER_BASE_URL}/controller/datarequest/${spec.id}`, {
  • net (weak) cyanheads-cdc-health-mcp-server-751ce63/tests/services/wonder/database-ids.test.ts :85 const body = await fetch(`https://wonder.cdc.gov/controller/datarequest/${id}`).then((r) =>

secrets 2

  • secrets (weak) cyanheads-cdc-health-mcp-server-751ce63/tests/config/server-config-edge.test.ts :11 delete process.env.CDC_APP_TOKEN;
  • secrets (weak) cyanheads-cdc-health-mcp-server-751ce63/tests/config/server-config.test.ts :11 delete process.env.CDC_APP_TOKEN;

tool registrations 4

  • cdc_discover_datasets cyanheads-cdc-health-mcp-server-751ce63/src/mcp-server/tools/definitions/discover-datasets.tool.ts :39
  • cdc_get_dataset_schema cyanheads-cdc-health-mcp-server-751ce63/src/mcp-server/tools/definitions/get-dataset-schema.tool.ts :23
  • cdc_query_dataset cyanheads-cdc-health-mcp-server-751ce63/src/mcp-server/tools/definitions/query-dataset.tool.ts :43
  • cdc_query_wonder cyanheads-cdc-health-mcp-server-751ce63/src/mcp-server/tools/definitions/query-wonder.tool.ts :77

declared dependencies 13

  • @cyanheads/mcp-ts-core@^0.12.3
  • pino-pretty@^13.1.3
  • zod@^4.4.3
  • @biomejs/biome@2.5.9
  • @opentelemetry/api@^1.9.1
  • @socketsecurity/bun-security-scanner@^1.1.2
  • @types/node@26.2.0
  • @vitest/coverage-istanbul@^4.1.11
  • depcheck@^1.4.7
  • ignore@^7.0.6
  • tsc-alias@^1.9.2
  • typescript@^7.0.2
show 1 more
  • vitest@^4.1.11

perm:untrusted 1

  • untrusted (weak) cyanheads-cdc-health-mcp-server-751ce63/tests/services/wonder/database-ids.test.ts :85 const body = await fetch(`https://wonder.cdc.gov/controller/datarequest/${id}`).then((r) =>