Is Usa Spending Mcp Server DEMO safe to use?

Usa Spending Mcp Server DEMO has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Usa Spending Mcp Server DEMO?

Usa Spending Mcp Server DEMO supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Usa Spending Mcp Server DEMO do?

Usa Spending Mcp Server DEMO provides 4 tools: Protocol, Requirements, Installation, Development. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Usa Spending Mcp Server DEMO?

Usa Spending Mcp Server DEMO is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is Usa Spending Mcp Server DEMO actively maintained?

Usa Spending Mcp Server DEMO is actively maintained — last commit was 23 days ago. It has 10 GitHub stars.

Usa Spending Mcp Server DEMO

Name: Usa Spending Mcp Server DEMO
Author: GSA-TTS

ANTHROPIC_API_KEY · by GSA-TTS

Test MCP Server for USA Spending API

10 4 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 23d ago

Works with most clients

Transport: stdio, http

4 tools · ~92 tok

Grade A · 0.0% of 200K ctx

Edit this pageView history

Finance Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "usa-spending-mcp-server-demo": {
      "args": [
        "-y",
        "ANTHROPIC_API_KEY"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/usa-spending-mcp-server-demo)](https://mcppedia.org/s/usa-spending-mcp-server-demo)

Read me

What Usa Spending Mcp Server DEMO does

⚠️ DISCLAIMER: This is a proof of concept and is not intended for production use.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'ANTHROPIC_API_KEY' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

84/100across 5 weighted dimensions

How we score →

0255075100

−16

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked ANTHROPIC_API_KEY against OSV.dev.

Inventory

Tools (4)

Click any tool to inspect its schema.

~92 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Usa Spending Mcp Server DEMO safe to use?: Usa Spending Mcp Server DEMO has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Usa Spending Mcp Server DEMO?: Usa Spending Mcp Server DEMO supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Usa Spending Mcp Server DEMO do?: Usa Spending Mcp Server DEMO provides 4 tools: Protocol, Requirements, Installation, Development. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Usa Spending Mcp Server DEMO?: Usa Spending Mcp Server DEMO is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is Usa Spending Mcp Server DEMO actively maintained?: Usa Spending Mcp Server DEMO is actively maintained — last commit was 23 days ago. It has 10 GitHub stars.

Similar servers

Others in finance / data

View all →

Dbhub96

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.0k 2

Mysql_mcp_server95

A Model Context Protocol (MCP) server that enables secure interaction with MySQL databases

1.3k 2

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

6.7k 4

Supabase MCP Server95

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for Usa Spending Mcp Server DEMO and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Finance Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "usa-spending-mcp-server-demo": {
      "args": [
        "-y",
        "ANTHROPIC_API_KEY"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/usa-spending-mcp-server-demo)](https://mcppedia.org/s/usa-spending-mcp-server-demo)

Read me

What Usa Spending Mcp Server DEMO does

⚠️ DISCLAIMER: This is a proof of concept and is not intended for production use.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'ANTHROPIC_API_KEY' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

USA Spending MCP Server

⚠️ DISCLAIMER: This is a proof of concept and is not intended for production use.

An MCP server for interacting with the USAspending.gov API, with optional login.gov authentication for cloud deployment.

Requirements

Python 3.11+
uv

Installation

Quick Install

uv tool install git+https://github.com/GSA-TTS/usa-spending-mcp-server

Development Setup

git clone https://github.com/GSA-TTS/usa-spending-mcp-server
cd usa-spending-mcp-server
uv sync --dev

Running Modes

The server supports two modes:

Mode	Command	Use Case
stdio	`usa-spending-mcp-server`	Local use with Claude Desktop
HTTP	`usa-spending-mcp-server-http`	Cloud deployment with login.gov auth

Local Setup (Claude Desktop)

Get the installed tool path:
```
which usa-spending-mcp-server
```

Add to your Claude MCP config (~/.claude/claude_desktop_config.json):

{
  "mcpServers": {
    "usa-spending": {
      "command": "/path/to/usa-spending-mcp-server"
    }
  }
}

HTTP Server with Login.gov Authentication

The HTTP server uses login.gov OIDC with PKCE for authentication, suitable for cloud.gov deployment.

Environment Variables

Variable	Required	Description
`REQUIRE_AUTH`	No	Set to `"false"` to disable auth (default: `"true"`)
`BASE_URL`	If auth enabled	Public URL of the server (e.g., `https://usa-spending-mcp.app.cloud.gov`)
`LOGINGOV_CLIENT_ID`	If auth enabled	Your login.gov application client ID
`JWT_SIGNING_KEY`	If auth enabled	Secret key for signing JWTs (generate with `python -c "import secrets; print(secrets.token_hex(32))"`)
`LOGINGOV_CONFIG_URL`	No	OIDC discovery URL (defaults to login.gov sandbox)
`PORT`	No	Server port (default: `8080`)

Login.gov Setup

Register at partners.login.gov
Create a new OIDC application:
- Protocol: OpenID Connect with PKCE (public client)
- Redirect URI: {BASE_URL}/auth/callback
Note your client ID for LOGINGOV_CLIENT_ID

Running Locally

Without authentication (development):

uv run task dev

With authentication:

export BASE_URL=http://localhost:8080
export LOGINGOV_CLIENT_ID=your-client-id
export JWT_SIGNING_KEY=$(python -c "import secrets; print(secrets.token_hex(32))")
uv run task dev-auth

Cloud.gov Deployment

Set environment variables:

cf set-env usa-spending-mcp-server BASE_URL https://usa-spending-mcp.app.cloud.gov
cf set-env usa-spending-mcp-server LOGINGOV_CLIENT_ID your-client-id
cf set-env usa-spending-mcp-server JWT_SIGNING_KEY your-signing-key

Deploy:
```
cf push
```

Development

Available Tasks

uv run task dev          # Run HTTP server without auth
uv run task dev-auth     # Run HTTP server with auth
uv run task lint         # Check code with ruff
uv run task lint-fix     # Fix linting issues
uv run task format       # Format code with ruff
uv run task test         # Run tests
uv run task test-cov     # Run tests with coverage
uv run task ci           # Run all CI checks

Code Quality

This project uses ruff for linting and formatting.

LLM-Based Evals (Optional)

For local testing of tool behavior using mcp-evals:

cd evals
npm install
ANTHROPIC_API_KEY=your-key npm run eval

See evals/README.md for details.

Project Structure

src/
  usa_spending_mcp_server/
    server.py        # stdio MCP server (Claude Desktop)
    server_http.py   # HTTP server with auth (cloud.gov)
    auth.py          # login.gov OIDC authentication
tests/               # Python unit tests
evals/               # LLM-based evals (optional)
manifest.yml         # c

... [View full README on GitHub](https://github.com/GSA-TTS/usa-spending-mcp-server-DEMO#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

84/100across 5 weighted dimensions

How we score →

0255075100

−16

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked ANTHROPIC_API_KEY against OSV.dev.

Inventory

Tools (4)

Click any tool to inspect its schema.

~92 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Usa Spending Mcp Server DEMO safe to use?: Usa Spending Mcp Server DEMO has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Usa Spending Mcp Server DEMO?: Usa Spending Mcp Server DEMO supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Usa Spending Mcp Server DEMO do?: Usa Spending Mcp Server DEMO provides 4 tools: Protocol, Requirements, Installation, Development. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Usa Spending Mcp Server DEMO?: Usa Spending Mcp Server DEMO is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is Usa Spending Mcp Server DEMO actively maintained?: Usa Spending Mcp Server DEMO is actively maintained — last commit was 23 days ago. It has 10 GitHub stars.