Is Mcp Korea Tourism Api safe to use?

Mcp Korea Tourism Api has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Mcp Korea Tourism Api?

Mcp Korea Tourism Api supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Mcp Korea Tourism Api do?

Mcp Korea Tourism Api provides 5 tools: search_keyword, search_area, search_location, search_events, get_detail. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Mcp Korea Tourism Api?

Mcp Korea Tourism Api is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Mcp Korea Tourism Api actively maintained?

Mcp Korea Tourism Api is less actively maintained — last commit was 290 days ago. It has 9 GitHub stars.

Mcp Korea Tourism Api

Name: Mcp Korea Tourism Api
Author: harimkang

@harimkang/mcp-korea-tourism-api · by harimkang

Model Context Protocol (MCP) server that provides tools for accessing the Korea Tourism API

9 5 tools GitHub npm PyPI

No known CVEs

MIT license

Stale

Last commit 290d ago

Works with most clients

Transport: stdio, sse, http

5 tools · ~570 tok

Grade B · 0.3% of 200K ctx

Edit this pageView history

Maps & Geo

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-korea-tourism-api": {
      "args": [
        "-y",
        "@harimkang/mcp-korea-tourism-api"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/mcp-korea-tourism-api)](https://mcppedia.org/s/mcp-korea-tourism-api)

Read me

What Mcp Korea Tourism Api does

Unlock the wonders of South Korean tourism directly within your AI assistant! This project provides a Model Context Protocol (MCP) server powered by the official Korea Tourism Organization (KTO) API. Equip your AI with the ability to discover vibrant festivals, serene temples, delicious restaurants, comfortable accommodations, and much more across Korea.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@harimkang/mcp-korea-tourism-api' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

73/100across 5 weighted dimensions

How we score →

0255075100

−27

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

4 fixed

GHSA-pjjw-68hj-v9mwmedium · fixedCVSS 4

uv vulnerable to arbitrary file deletion through RECORD entries

## Impact Wheel RECORD entries can contain relative paths that traverse outside of the wheel’s installation prefix. In versions 0.11.5 and earlier of uv, these wheels were not rejected on installation and the RECORD was respected without validation on uninstall. uv uses the RECORD to determine files to remove on uninstall. Consequently, a malicious or malformed wheel could induce deletion of arbitrary files outside of the wheel’s installation prefix on uninstall. uv does not use the RECORD fi

Affected: >= 0Fixed in 0.11.6source →

CVE-2025-13327medium · fixedCVSS 4

uv allows ZIP payload obfuscation through parsing differentials

### Impact In versions 0.9.5 and earlier of uv, ZIP archives were handled in a manner that enabled two parsing differentials against other components of the Python packaging ecosystem: 1. Central directory entries in a ZIP archive can contain comment fields. However, uv would assume that these fields were not present, since they aren't widely used. Consequently, a ZIP archive could be constructed where uv would interpret the contents of a central directory comment field as ZIP control structur

Affected: >= 0Fixed in 0.9.6source →

GHSA-w476-p2h3-79g9info · fixed

uv has differential in tar extraction with PAX headers

### Impact In versions 0.9.4 and earlier of uv, tar archives containing PAX headers with file size overrides were not handled properly. As a result, an attacker could contrive a source distribution (as a tar archive) that would extract differently when installed via uv versus other Python package installers. The underlying parsing differential here originates with astral-tokio-tar, which disclosed this vulnerability as CVE-2025-62518. In practice, the impact of this vulnerability is **low**:

Affected: >= 0Fixed in 0.9.5source →

CVE-2025-54368medium · fixedCVSS 4

uv allows ZIP payload obfuscation through parsing differentials

## Impact In versions 0.8.5 and earlier of uv, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. This enabled two parser differentials against other Python package installers: 1. An attacker could contrive a ZIP archive that would extract with legitimate contents on some package installers, and malicious contents on others due to multiple local file entries. The attacker could choose which installer to target

Affected: >= 0Fixed in 0.8.6source →

Inventory

Tools (5)

Click any tool to inspect its schema.

~570 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mcp Korea Tourism Api safe to use?: Mcp Korea Tourism Api has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Mcp Korea Tourism Api?: Mcp Korea Tourism Api supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mcp Korea Tourism Api do?: Mcp Korea Tourism Api provides 5 tools: search_keyword, search_area, search_location, search_events, get_detail. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mcp Korea Tourism Api?: Mcp Korea Tourism Api is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Mcp Korea Tourism Api actively maintained?: Mcp Korea Tourism Api is less actively maintained — last commit was 290 days ago. It has 9 GitHub stars.

Similar servers

Others in maps

View all →

Tomtom Mcp90

A Model Context Protocol (MCP) server providing TomTom's location services, search, routing, and traffic data to AI agents.

46 1

io.github.srivastsh/bart-mcp90

Real-time BART departures, trip planning, fares, stations, and advisories.

io.github.vessel-api/vesselapi-mcp88

MCP server for the VesselAPI — maritime vessel tracking, port events, emissions, and navigation data

dev.forgesworn/rendezvous-mcp87

Fair meeting point discovery for AI agents with isochrone-based travel time fairness

MCP Security Weekly

Get CVE alerts and security updates for Mcp Korea Tourism Api and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Maps & Geo

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-korea-tourism-api": {
      "args": [
        "-y",
        "@harimkang/mcp-korea-tourism-api"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/mcp-korea-tourism-api)](https://mcppedia.org/s/mcp-korea-tourism-api)

Read me

What Mcp Korea Tourism Api does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@harimkang/mcp-korea-tourism-api' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Korea Tourism API MCP Server ✈️

Links:

PyPI Package: https://pypi.org/project/mcp-korea-tourism-api/
GitHub Repository: https://github.com/harimkang/mcp-korea-tourism-api
Releases: https://github.com/harimkang/mcp-korea-tourism-api/releases

✨ Features

Comprehensive Search: Find tourist spots, cultural sites, events, food, lodging, and shopping via keywords, area, or location.
Rich Details: Access descriptions, operating hours, admission fees, photos, addresses, and contact information.
Location-Aware: Discover attractions near specific GPS coordinates.
Timely Information: Find festivals and events based on date ranges.
Multilingual Support: Get information in various languages supported by the KTO API (including English).
- Supported Languages: English, Japanese, Simplified Chinese, Traditional Chinese, Russian, Spanese, German, French
Efficient & Resilient:
- Response Caching: Uses time-to-live (TTL) caching to store results and reduce redundant API calls, improving speed.
- Rate Limiting: Respects API usage limits to prevent errors.
- Automatic Retries: Automatically retries requests in case of temporary network or server issues.
MCP Standard: Seamlessly integrates with AI assistants supporting the Model Context Protocol.

⚠️ Prerequisites

Before you begin, you must obtain an API key from the Korea Tourism Organization (KTO) Data Portal.

Visit the KTO Data Portal (or the specific portal for the tourism API if available).
Register and request an API key for the "TourAPI" services (you might need to look for services providing information like areaBasedList, searchKeyword, detailCommon, etc.).
Keep your Service Key (API Key) safe. It will be required during installation or runtime.

You need to apply for the API below to make a request for each language.

English: https://www.data.go.kr/data/15101753/openapi.do

Japanese: https://www.data.go.kr/data/15101760/openapi.do

Simplified Chinese: https://www.data.go.kr/data/15101764/openapi.do

Traditional Chinese: https://www.data.go.kr/data/15101769/openapi.do

Russian: https://www.data.go.kr/data/15101831/openapi.do

Spanese: https://www.data.go.kr/data/15101811/openapi.do

German: https://www.data.go.kr/data/15101805/openapi.do

French: https://www.data.go.kr/data/15101808/openapi.do

🚀 Installation & Running

You can run this MCP server using either uv (a fast Python package installer and runner) or Docker.

Installing via Smithery

To install Korea Tourism API MCP Server for Claude Desktop automatically via Smithery:

npx -y @smithery

... [View full README on GitHub](https://github.com/harimkang/mcp-korea-tourism-api#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

73/100across 5 weighted dimensions

How we score →

0255075100

−27

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

4 fixed

GHSA-pjjw-68hj-v9mwmedium · fixedCVSS 4

uv vulnerable to arbitrary file deletion through RECORD entries

Affected: >= 0Fixed in 0.11.6source →

CVE-2025-13327medium · fixedCVSS 4

uv allows ZIP payload obfuscation through parsing differentials

Affected: >= 0Fixed in 0.9.6source →

GHSA-w476-p2h3-79g9info · fixed

uv has differential in tar extraction with PAX headers

Affected: >= 0Fixed in 0.9.5source →

CVE-2025-54368medium · fixedCVSS 4

uv allows ZIP payload obfuscation through parsing differentials

Affected: >= 0Fixed in 0.8.6source →

Inventory

Tools (5)

Click any tool to inspect its schema.

~570 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mcp Korea Tourism Api safe to use?: Mcp Korea Tourism Api has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Mcp Korea Tourism Api?: Mcp Korea Tourism Api supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mcp Korea Tourism Api do?: Mcp Korea Tourism Api provides 5 tools: search_keyword, search_area, search_location, search_events, get_detail. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mcp Korea Tourism Api?: Mcp Korea Tourism Api is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Mcp Korea Tourism Api actively maintained?: Mcp Korea Tourism Api is less actively maintained — last commit was 290 days ago. It has 9 GitHub stars.