I
io.github.geolens-io/geolens
@geolens/sdk
Read-only access to a self-hosted GeoLens spatial catalog: datasets, features, maps, sandboxed SQL.
No known CVEs
Apache-2.0 license
Actively maintained
Last commit 0d ago
Works with most clients
Transport: stdio, sse
12 tools · ~661 tok
Grade B · 0.3% of 200K ctx
MCPpedia last refreshed this data
io.github.geolens-io/geolens is an MCP server that read-only access to a self-hosted GeoLens spatial catalog: datasets, features, maps, sandboxed SQL. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 85/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io-github-geolens-io-geolens": {
"args": [
"-y",
"@geolens/sdk"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-geolens-io-geolens)
Read me
What io.github.geolens-io/geolens does
Read-only access to a self-hosted GeoLens spatial catalog: datasets, features, maps, sandboxed SQL.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y '@geolens/sdk' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
85/100across 5 weighted dimensions
0255075100
30
14
16
15
10
−15
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 fixed
CVE-2026-55178high · fixedCVSS 7.5
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
### Summary Multiple GeoLens read/link endpoints authorized only the resource named in the request URL (a map, a VRT, a source dataset, an AI request) and failed to re-authorize a **second, caller-influenced dataset** that the request reached through a relationship, layer reference, mosaic source, or request body. This "authorize the URL resource, read a *different* dataset un-re-authorized" pattern let callers read data from datasets they have no access to. The most severe instances require *
Inventory
Tools (12)
Click any tool to inspect its schema.
~661 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.geolens-io/geolens safe to use?
- io.github.geolens-io/geolens has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
- How do I install io.github.geolens-io/geolens?
- io.github.geolens-io/geolens supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.geolens-io/geolens do?
- io.github.geolens-io/geolens provides 12 tools: Documentation, Features, Analysis, Screenshots, Upgrading and 7 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.geolens-io/geolens?
- io.github.geolens-io/geolens is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
- Is io.github.geolens-io/geolens actively maintained?
- io.github.geolens-io/geolens is actively maintained - last commit was 0 days ago.
Related
Similar servers
Others in other
I
io.github.vshulcz/deja-vu95deja-vu: local memory over the session histories of thirty-five coding agents.
1.1k 6
Headroom95Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.
74.2k 3
Reolink CLI95Official command-line tool for Reolink IP cameras, doorbells and NVRs — LAN only, no cloud. Snapshots, PTZ, RTSP/RTMP stream URLs, two-way audio (talkback/TTS), motion and AI detection, event monitoring, VOD download. JSON output and a built-in MCP server. Works with Home Assistant, Frigate and go2rtc.
106 6
P
Pubmed MCP Server94Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms.
152 9
MCP Security Weekly
Get CVE alerts and security updates for io.github.geolens-io/geolens and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.