Is Stata MCP Server safe to use?

Stata MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Stata MCP Server?

Stata MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Stata MCP Server do?

Stata MCP Server provides 2 tools: execute_stata, regression_analysis. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Stata MCP Server?

Stata MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is Stata MCP Server actively maintained?

Stata MCP Server is actively maintained — last commit was 1 day ago. It has 207 GitHub stars.

Stata MCP Server

stata-mcp

Let LLM help you achieve your regression analysis with Stata

207 2 tools GitHub PyPI

No known CVEs

No license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, http

2 tools · ~82 tok

Grade A · 0.0% of 200K ctx

Edit this pageView history

Data Analytics

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "stata-mcp": {
      "args": [
        "stata-mcp"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-sepinetam-stata-mcp)](https://mcppedia.org/s/io-github-sepinetam-stata-mcp)

Read me

What Stata MCP Server does

Let LLM help you achieve your regression analysis with Stata ✨ Evolve from reg monkey to causal thinker 🐒 -> 🧐

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'stata-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 fixed

CVE-2026-47708info · fixed

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

### Summary The `log_file_name` parameter in the `stata_do` API and CLI is directly interpolated into a Stata command string without sanitization. The security guard (`GuardValidator`) only scans the do-file content but does not validate this parameter. An attacker can inject arbitrary Stata commands (including `shell`, `python`, `erase`, etc.) by crafting a malicious `log_file_name` containing quotes, newlines, or Stata command separators. ### Details In `src/stata_mcp/stata/stata_do/do.py`,

Affected: >= 0Fixed in 1.17.3source →

CVE-2026-31040info · fixed

stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution

A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.

Affected: >= 0Fixed in 1.13.0source →

Inventory

Tools (2)

Click any tool to inspect its schema.

~82 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Stata MCP Server safe to use?: Stata MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Stata MCP Server?: Stata MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Stata MCP Server do?: Stata MCP Server provides 2 tools: execute_stata, regression_analysis. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Stata MCP Server?: Stata MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is Stata MCP Server actively maintained?: Stata MCP Server is actively maintained — last commit was 1 day ago. It has 207 GitHub stars.

Similar servers

Others in data / analytics

View all →

Dbhub96

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.1k 2

Sink95

⚡ A Simple / Speedy / Secure Link Shortener with Analytics, 100% run on Cloudflare.

6.9k 3

Supabase MCP Server95

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

6.7k 4

MCP Security Weekly

Get CVE alerts and security updates for Stata MCP Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Data Analytics

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "stata-mcp": {
      "args": [
        "stata-mcp"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-sepinetam-stata-mcp)](https://mcppedia.org/s/io-github-sepinetam-stata-mcp)

Read me

What Stata MCP Server does

Let LLM help you achieve your regression analysis with Stata ✨ Evolve from reg monkey to causal thinker 🐒 -> 🧐

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'stata-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

MCP-for-Stata: Integrate Stata into your agent

Enable Claude Code, Codex, OpenClaw, and other AI agents to safely invoke Stata on your local device for data analysis.

Stata is a registered trademark of StataCorp LLC. This project is an independent community-developed tool and is not affiliated with, endorsed by, or sponsored by StataCorp LLC.

🆕 News

Find more in WeChat: Why I made it?, and 8 figures find out Stata-MCP
🦞 OpenClaw Support: Standalone CLI tools for OpenClaw integration (stata-mcp tool), see OpenClaw guide
✨ Claude Code Plugin Support: Official plugin package with MCP server and Stata LSP integration
Use MCP-for-Stata in Claude Code, see Claude Code advanced usage, or in Codex see Codex advanced usage

Finding our newest research? View latest research reports.

Looking for others?

MCP or AI about Stata

A session based MCP server for Stata, mcp-stata

IDEs (VScode or Cursor) integrated stata-mcp for VSCode. Confused them? 💡 Comparison

Datasets and Information

STOP Dataset: StataMCP-Team Opendata Project 📊, we have open-sourced a comprehensive dataset collection for social science research, aiming to enable the future of AI-driven and data-powered research paradigms.

Why AGPL 3.0 License?

The AGPL 3.0 License is a type of open-source license. It does not affect your daily use, and allows you to use, modify, and distribute this software free of charge, provided that you comply with its terms, such as retaining the original copyright notices.

Notes: While we strive to make open source accessible to everyone, we regret that we can no longer maintain the Apache-2.0 License. Due to individuals directly copying this project and claiming to be its maintainers, we have decided to change the license to AGPL-3.0 to prevent misuse of the project in ways that go against our original vision.

Notes: 尽管我们希望尽可能让所有人都能从开源中获益，但我们很遗憾地宣布无法继续保持 Apache-2.0 License。由于有人直接抄袭本项目并标榜其为项目维护者，我们不得不将 License 更改为 AGPL-3.0，以防止有人滥用本项目进行违背项目初心的事情。

Reason following:

Background: @jackdark425's repository directly copied this project and claimed to be the sole maintainer. We welcome open source collaboration based on f

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 fixed

CVE-2026-47708info · fixed

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

Affected: >= 0Fixed in 1.17.3source →

CVE-2026-31040info · fixed

stata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution

A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.

Affected: >= 0Fixed in 1.13.0source →

Inventory

Tools (2)

Click any tool to inspect its schema.

~82 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Stata MCP Server safe to use?: Stata MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Stata MCP Server?: Stata MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Stata MCP Server do?: Stata MCP Server provides 2 tools: execute_stata, regression_analysis. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Stata MCP Server?: Stata MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is Stata MCP Server actively maintained?: Stata MCP Server is actively maintained — last commit was 1 day ago. It has 207 GitHub stars.