Is io.github.aborruso/ckan-mcp-server safe to use?

io.github.aborruso/ckan-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.aborruso/ckan-mcp-server?

io.github.aborruso/ckan-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.aborruso/ckan-mcp-server do?

io.github.aborruso/ckan-mcp-server provides 4 tools: search_datasets, explore_organizations, query_tabular_data, read_metadata. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.aborruso/ckan-mcp-server?

io.github.aborruso/ckan-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.aborruso/ckan-mcp-server actively maintained?

io.github.aborruso/ckan-mcp-server is actively maintained — last commit was 7 days ago. It has 50 GitHub stars.

io.github.aborruso/ckan-mcp-server

@aborruso/ckan-mcp-server

MCP server for interacting with CKAN open data portals

50 4 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 7d ago

Works with most clients

Transport: stdio, http

4 tools · ~167 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ckan": {
      "url": "https://ckan-mcp-server.andy-pr.workers.dev/mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-aborruso-ckan-mcp-server)](https://mcppedia.org/s/io-github-aborruso-ckan-mcp-server)

Read me

What io.github.aborruso/ckan-mcp-server does

Turn any (CKAN) open data portal into a conversation.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@aborruso/ckan-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

88/100across 5 weighted dimensions

How we score →

0255075100

−12

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-33060low · fixedCVSS 3.1

SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks

## Summary The `@aborruso/ckan-mcp-server` MCP server provides tools including `ckan_package_search` and `sparql_query` that accept a `base_url` parameter, making HTTP requests to arbitrary endpoints without restriction. A CKAN portal client has no legitimate reason to contact cloud metadata or internal network services. ## Severity Attack complexity is HIGH because exploitation requires prompt injection via malicious content (webpage, document) while the victim's AI assistant has this MCP se

Affected: >= 0Fixed in 0.4.85source →

Inventory

Tools (4)

Click any tool to inspect its schema.

~167 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.aborruso/ckan-mcp-server safe to use?: io.github.aborruso/ckan-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.aborruso/ckan-mcp-server?: io.github.aborruso/ckan-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.aborruso/ckan-mcp-server do?: io.github.aborruso/ckan-mcp-server provides 4 tools: search_datasets, explore_organizations, query_tabular_data, read_metadata. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.aborruso/ckan-mcp-server?: io.github.aborruso/ckan-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.aborruso/ckan-mcp-server actively maintained?: io.github.aborruso/ckan-mcp-server is actively maintained — last commit was 7 days ago. It has 50 GitHub stars.

Similar servers

Others in data

View all →

PostgreSQL MCP Server98

Query and manage PostgreSQL databases directly from AI assistants

86.4k 1

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

6.4k 4

Supabase MCP Server95

Manage Supabase projects — databases, auth, storage, and edge functions

2.7k 4

Alpha Vantage Mcp95

Real-time financial market data: stocks, forex, crypto, commodities, and economic indicators

158 3

MCP Security Weekly

Get CVE alerts and security updates for io.github.aborruso/ckan-mcp-server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ckan": {
      "url": "https://ckan-mcp-server.andy-pr.workers.dev/mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-aborruso-ckan-mcp-server)](https://mcppedia.org/s/io-github-aborruso-ckan-mcp-server)

Read me

What io.github.aborruso/ckan-mcp-server does

Turn any (CKAN) open data portal into a conversation.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@aborruso/ckan-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

CKAN MCP Server

Turn any (CKAN) open data portal into a conversation.

Give your AI assistant direct access to any CKAN open data portal — search datasets, explore organizations, query tabular data, and read metadata, all through natural language.

CKAN is the open-source platform behind most public open data portals worldwide (Italy's dati.gov.it, the US data.gov, Canada's open.canada.ca, and many more). Navigating these portals usually requires knowing their structure, APIs, and search syntax. This MCP server removes that barrier: once connected, your AI tool can do it all for you.

This is possible because of open standards and open source. CKAN exposes a fully documented, public API. Metadata follows DCAT, an open W3C standard for describing datasets. Both are free to use, free to build on, and maintained by open communities. This server stands on that foundation.

Who is this for? Everyone. Journalists looking for data to verify a story. Researchers exploring public datasets. Public servants checking what data their administration publishes. Developers building data pipelines. No CKAN knowledge required.

Two ways to use it — pick the one that suits you:

	Option A: Install locally	Option B: No install
How	`npm install -g @aborruso/ckan-mcp-server`	Point your tool to the hosted HTTP endpoint
Best for	Runs on your machine, works with any local tool	Quick start, zero setup
Limits	None	100k requests/day shared quota

Hosted endpoint: https://ckan-mcp-server.andy-pr.workers.dev/mcp

Recommendation: Option B is a great way to get started and try things out without any setup. Once you're familiar with what the server can do, switching to Option A (local install) gives you unlimited usage with no shared quotas.

👉 Want to explore the codebase? The AI-generated DeepWiki is a great starting point.

License: MIT — see LICENSE for complete details. Third-party notices: NOTICE.md.

🔌 Use it in your favorite tool

This server works with any MCP-compatible client. The sections below cover some of the most popular ones — if your tool isn't listed, check its documentation for MCP configuration and use the same endpoint URL or command.

All examples below work with both the local installation and the hosted endpoint. Where both options differ, both are shown.

Using local installation? You need to install the server first — see Run locally.

ChatGPT

Requires a ChatGPT Plus, Team, or Enterprise plan.

Open the profile menu and go to Settings → Apps → Advanced settings
Enable Developer mode
Click Create app (top-right)
Fill in the form:
- Name: CKAN MCP Server
- Description: Search datasets on CKAN open data portals
- MCP Server URL: https://ckan-mcp-server.andy-pr.workers.dev/mcp
- Authentication: No Auth
- Check the confirmation box, then click Create
In a new chat, click **+

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

88/100across 5 weighted dimensions

How we score →

0255075100

−12

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-33060low · fixedCVSS 3.1

SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks

Affected: >= 0Fixed in 0.4.85source →

Inventory

Tools (4)

Click any tool to inspect its schema.

~167 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.aborruso/ckan-mcp-server safe to use?: io.github.aborruso/ckan-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.aborruso/ckan-mcp-server?: io.github.aborruso/ckan-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.aborruso/ckan-mcp-server do?: io.github.aborruso/ckan-mcp-server provides 4 tools: search_datasets, explore_organizations, query_tabular_data, read_metadata. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.aborruso/ckan-mcp-server?: io.github.aborruso/ckan-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.aborruso/ckan-mcp-server actively maintained?: io.github.aborruso/ckan-mcp-server is actively maintained — last commit was 7 days ago. It has 50 GitHub stars.