← Back to search

io.github.cyanheads/cdc-health-mcp-server

cyanheads streamable_http Scanned 26d ago

Search and query CDC public health data — mortality, vaccinations, surveillance, behavioral risk.

? Not scanned yet

Versions

0.8.0latest
Jul 11, 2026
0.7.1
Jul 11, 2026
0.7.0
Jun 21, 2026
0.6.12
Jun 20, 2026
0.6.11
Jun 13, 2026
+ show 15 moreshow less
0.6.10
Jun 12, 2026
0.6.9
Jun 4, 2026
0.6.8
Jun 2, 2026
0.6.7
May 30, 2026
0.6.6
May 29, 2026
0.6.5
May 23, 2026
0.6.4
May 16, 2026
0.6.3
May 8, 2026
0.6.2
May 8, 2026
0.6.1
May 5, 2026
0.6.0
Apr 24, 2026
0.5.0
Apr 20, 2026
0.4.3
Apr 4, 2026
0.4.2
Apr 4, 2026
0.4.1
Apr 3, 2026

Tools 4

cdc_query_dataset
annotations: verified low

Execute a SoQL query against any CDC dataset. Supports filtering, aggregation, sorting, full-text search, and field selection. Use cdc_discover_datasets to find dataset IDs and cdc_get_dataset_schema to inspect columns before querying.

input object
readOnlyHint true
cdc_discover_datasets
annotations: verified low

Search the CDC dataset catalog by keyword, category, or tag. Returns IDs, names, truncated descriptions, asset types, column counts, and update timestamps. The catalog also holds charts, maps, stories, files, and links; an entry whose columnCount is 0 is one of those and yields no data from the other tools. Use cdc_get_dataset_schema for the full column list of a chosen dataset.

input object
readOnlyHint true
cdc_query_wonder
annotations: verified low

Query CDC WONDER for national US mortality statistics — deaths, population, and crude/age-adjusted death rates — across its five mortality databases, selected with the database input: final underlying-cause data for 1999–2020 (the default) or 2018–2024, provisional data running from 2018 through the current year, and two multiple-cause databases covering the same two eras. Break results out by year, age group, sex, and/or race, and filter by ICD-10 cause of death, sex, age group, or year range; on a multiple-cause database, mcd_icd10 additionally matches a cause listed anywhere on the death certificate rather than only the one certified as underlying. Each database holds a different span of years (${WONDER_YEAR_BOUNDS.first}–${WONDER_YEAR_BOUNDS.last} across all of them) and a request whose year_range falls outside the selected one's span is rejected with that span named. WONDER is a separate CDC system from the Socrata datasets the other cdc_* tools query. Data is national only — sub-national (state/county) breakdowns are not available through the API (CDC vital-statistics policy). Cause of death is a filter, not a grouping. Some measure cells come back as a CDC status token rather than a number — "Suppressed" (withheld for confidentiality), "Unreliable" (a rate from fewer than 20 deaths), or "Not Applicable" (no population denominator); those cells read null in rows and each one is listed in cellNotes with its token. CDC also drops whole rows before sending the table — strata with zero deaths, and strata whose death count is suppressed — so a stratum can be missing from rows entirely; messages carries CDC's statement whenever that happened. The whole table comes back by default; a broad grouping can run past a thousand rows, so set limit to take it a page at a time and follow the nextOffset the response reports. Paging shapes the response only — WONDER is asked once either way, and the figures, caveats and hidden-row notices are the same on every page. CDC rejects requests made less than 15 seconds apart across all five databases, so consecutive calls are spaced automatically and a follow-up call may wait about 16 seconds before it runs.

readOnlyHint true
cdc_get_dataset_schema
annotations: verified low

Fetch the column schema for a CDC dataset — names, data types, descriptions, row count, and last-updated timestamp. Returns the first 100 columns by default; wide datasets continue via column_offset. Get dataset IDs from cdc_discover_datasets.

input object
readOnlyHint true

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 18

info
Tool 'cdc_query_dataset' annotations are consistent annotation_checker · 80%
info
Tool 'cdc_discover_datasets' annotations are consistent annotation_checker · 80%
info
Tool 'cdc_query_wonder' annotations are consistent annotation_checker · 80%
info
Tool 'cdc_get_dataset_schema' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: cdc_query_dataset manifest_parser · 75%
info
Tool: cdc_discover_datasets manifest_parser · 75%
info
Tool: cdc_query_wonder manifest_parser · 75%
info
Tool: cdc_get_dataset_schema manifest_parser · 75%
info
Required env vars (8) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 13 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-cdc-health-mcp-server-4b87fe8/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%