DHIS2 toolkit for Python — client, CLI, MCP server, browser automation.
winterop-com/dhis2w is an MCP server distributed on github, maintained by winterop-com, tracked here since September 2026. It has shipped 86 releases (currently 1.23.0) and exposes 312 tools. Tools include analytics_enrollments_query, analytics_events_query, analytics_outlier_detection, analytics_query, analytics_tracked_entities_query, apps_get, and 306 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised 2 review prompts — dangerous code and exfiltration combo — each a pattern worth a human look rather than a finding of fault.
Since the previous scan on 2026-09-15: 6 tools removed.
full security breakdown →-
analytics_enrollments_query -
analytics_events_query -
analytics_outlier_detection -
analytics_query -
analytics_tracked_entities_query -
apps_get -
apps_hub_list -
apps_hub_url_get -
apps_hub_url_set -
apps_hub_versions -
apps_install_from_file -
apps_install_from_hub -
apps_list -
apps_reload -
apps_restore -
apps_snapshot -
apps_uninstall -
apps_update -
apps_update_all -
customize_apply
06-18 00:00 08-01 00:00 now
| version | date | src |
|---|---|---|
| v1.23.0 | 2026-09-14 | github |
| 1.23.0 | 2026-09-14 | pypi |
| v1.22.0 | 2026-09-14 | github |
| 1.22.0 | 2026-09-14 | pypi |
| v1.21.0 | 2026-09-14 | github |
| 1.21.0 | 2026-09-14 | pypi |
| v1.20.0 | 2026-09-12 | github |
| 1.20.0 | 2026-09-12 | pypi |
| v1.19.0 | 2026-09-11 | github |
| 1.19.0 | 2026-09-11 | pypi |