lzinga/us-gov-open-data-mcp

MCP server + TypeScript SDK for 40+ U.S. government data APIs — 250+ tools. Treasury, FRED, Congress, FDA, CDC, FEC, lobbying, and many more. Works with VS Code Copilot, Claude Desktop, Cursor.

103 starsTypeScriptMITapicdcclaudecongress

REVIEWED85/100

Scanned 2026-07-11 · deepseek v1

Dimension breakdown

Security

72/100

5 findings

Quality

85/100

No findings

License

95/100

No findings

Completeness

95/100

No findings

Findings (5)

MEDIUM: 3LOW: 1INFO: 1

MEDIUMsecurityPotential XXE in XML parsing
MEDIUMsecurityHTML entity decoding may lead to XSS
MEDIUMsecurityDisk-backed caching may expose sensitive data
LOWsecurityWASM sandboxed code execution still carries risk
INFOsecurityEnvironment variables for API keys

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/lzinga/us-gov-open-data-mcp.svg)](https://archimedes.market/r/lzinga/us-gov-open-data-mcp)

HTML

<a href="https://archimedes.market/r/lzinga/us-gov-open-data-mcp"><img src="https://archimedes.market/api/badge/lzinga/us-gov-open-data-mcp.svg" alt="Archimedes Trust Verified"/></a>