{
"mcpServers": {
"ckan-mcp-server": {
"command": "npx",
"args": [
"-y",
"@aborruso/ckan-mcp-server"
]
}
}
}Auto-generated from package name. Add to your client's MCP config file.
MCP server for interacting with CKAN open data portals
Is it safe?
No known CVEs for @aborruso/ckan-mcp-server. 1 previously resolved.
No authentication — any process on your machine can connect.
License not specified.
Is it maintained?
Commit history unknown.
Will it work with my client?
Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y @aborruso/ckan-mcp-server 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
This server is missing a description. Tools and install config are also missing.If you've used it, help the community.
Add informationNo open vulnerabilities. 1 fixed CVE.
CVE-2026-33060FixedSSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks
## Summary The `@aborruso/ckan-mcp-server` MCP server provides tools including `ckan_package_search` and `sparql_query` that accept a `base_url` parameter, making HTTP requests to arbitrary endpoints without restriction. A CKAN portal client has no legitimate reason to contact cloud metadata or internal network services. ## Severity Attack complexity is HIGH because exploitation requires prompt injection via malicious content (webpage, document) while the victim's AI assistant has this MCP se
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.