Search and trace US federal rules across the Federal Register (proposed/final rules and notices), the eCFR (codified, point-in-time CFR full text, locally mirrored), and Regulations.gov (rulemaking dockets and public comments) via MCP. STDIO or Streamable HTTP.
Insufficient evidence to grade. This server's source has not been statically analyzed, so a low grade would only mean "nothing found", not "nothing there". We don't show a reassuring grade we can't stand behind. Attested signals (CVEs, provenance) below still apply.
Once the source is analyzed (see the analysis flag in the header), a graded score appears here. How analysis works: methodology.
graded 13m ago · see ecosystem CVEs →
- C · 39 → B · 29
No known CVEs for this server.
- hightoxic flow (lethal trifecta)
lethal trifecta reachable across this server's tools: private-data access + untrusted-content ingestion + network exfil
- lowexfiltration combo
sensitive read and network capabilities split across this server's tools
[](https://mcpobservatory.com/servers/github:cyanheads/federal-regulations-mcp-server/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of cyanheads.