npm analyzed 0.11.0

@mapbox/mcp-server

v0.11.0
npm

Mapbox MCP server.

maintainer
mapbox-npm-01
license
MIT
first seen
2026-06-02
last seen
2026-06-10
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools
transport stdio counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • uri

    The resource URI to read (e.g., mapbox://categories, mapbox://categories/ja)

code evidence v0.11.0 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 4

  • fs package/dist/commonjs/index.js :9 const node_fs_1 = require("node:fs");
  • fs package/dist/commonjs/utils/versionUtils.js :9 const node_fs_1 = require("node:fs");
  • fs package/dist/esm/index.js :7 import { readFileSync } from 'node:fs';
  • fs package/dist/esm/utils/versionUtils.js :3 import { readFileSync } from 'node:fs';

network 2

  • net package/dist/commonjs/resources/ui-apps/StaticMapUIResource.js :199 const response = await fetch(url);
  • net package/dist/esm/resources/ui-apps/StaticMapUIResource.js :196 const response = await fetch(url);

secrets 8

  • secrets package/dist/commonjs/index.js :227 MAPBOX_ACCESS_TOKEN: process.env.MAPBOX_ACCESS_TOKEN ? '***' : undefined,
  • secrets package/dist/commonjs/resources/MapboxApiBasedResource.js :14 return process.env.MAPBOX_ACCESS_TOKEN;
  • secrets package/dist/commonjs/tools/MapboxApiBasedTool.js :11 return process.env.MAPBOX_ACCESS_TOKEN;
  • secrets package/dist/commonjs/tools/optimization-tool/OptimizationV2Tool.js :276 const accessToken = process.env.MAPBOX_ACCESS_TOKEN ||
  • secrets package/dist/esm/index.js :225 MAPBOX_ACCESS_TOKEN: process.env.MAPBOX_ACCESS_TOKEN ? '***' : undefined,
  • secrets package/dist/esm/resources/MapboxApiBasedResource.js :11 return process.env.MAPBOX_ACCESS_TOKEN;
  • secrets package/dist/esm/tools/MapboxApiBasedTool.js :8 return process.env.MAPBOX_ACCESS_TOKEN;
  • secrets package/dist/esm/tools/optimization-tool/OptimizationV2Tool.js :273 const accessToken = process.env.MAPBOX_ACCESS_TOKEN ||

install hooks 1

  • postinstall package/package.json :22 patch-package || (cd ../../.. && node ./node_modules/patch-package/index.js --patch-dir ./node_modules/@mapbox/mcp-server/patches) || true

declared dependencies 34

  • @mcp-ui/server@^6.1.0
  • @modelcontextprotocol/ext-apps@^1.1.1
  • @modelcontextprotocol/sdk@^1.29.0
  • @opentelemetry/api@^1.9.0
  • @opentelemetry/auto-instrumentations-node@^0.56.0
  • @opentelemetry/exporter-trace-otlp-http@^0.56.0
  • @opentelemetry/instrumentation@^0.56.0
  • @opentelemetry/resources@^1.30.1
  • @opentelemetry/sdk-node@^0.56.0
  • @opentelemetry/sdk-trace-base@^1.30.1
  • @opentelemetry/semantic-conventions@^1.30.1
  • @turf/turf@^7.3.1
  • patch-package@^8.0.1
  • zod@^3.25.42
  • @eslint/js@^9.27.0
  • @types/node@^22.0.0
  • @typescript-eslint/eslint-plugin@^8.0.0
  • @typescript-eslint/parser@^8.0.0
  • @vitest/coverage-istanbul@^3.2.4
  • cspell@^9.2.1
  • eslint@^9.0.0
  • eslint-config-prettier@^10.1.8
  • eslint-plugin-n@^17.21.3
  • eslint-plugin-prettier@^5.5.4
  • eslint-plugin-unused-imports@^4.2.0
  • globals@^16.3.0
  • husky@^9.0.0
  • lint-staged@^16.1.0
  • plop@^4.0.1
  • prettier@^3.0.0
  • tshy@^3.0.2
  • typescript@^5.8.3
  • typescript-eslint@^8.42.0
  • vitest@^3.2.4