← Back to search

io.github.cyanheads/fema-mcp-server

cyanheads streamable_http Scanned 24d ago

Query FEMA disaster declarations, public assistance grants, housing aid, and NFIP claims.

MCP Registry ↗
B
89.5 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

fema_dataframe_query
annotations: verified low

Run a read-only SQL SELECT against a DataCanvas table staged by fema_search_nfip.

input object shown number output object canvas_id string
readOnlyHint true openWorldHint false idempotentHint true
fema_search_nfip
annotations: verified low

Search National Flood Insurance Program (NFIP) claims data by state, county, ZIP code, and year range.

input object output object
readOnlyHint true openWorldHint true
fema_get_housing_assistance
annotations: verified low

Retrieve Individual Assistance (IA) housing data for a disaster by disaster number.

city string input object county string offset number output object zip_code string disaster_number number
readOnlyHint true openWorldHint true
fema_dataframe_drop
annotations: verified low

Permanently remove one table or view from a DataCanvas staged by fema_search_nfip.

input object output object canvas_id string table_name string
readOnlyHint false openWorldHint false idempotentHint true destructiveHint true
fema_dataframe_describe
annotations: verified low

List tables and column schemas on a DataCanvas staged by fema_search_nfip.

input object output object canvas_id string
readOnlyHint true openWorldHint false idempotentHint true
fema_get_public_assistance
annotations: verified low

Retrieve Public Assistance (PA) funded project records for a disaster or state — shows where federal recovery money was obligated.

input object county string offset number output object disaster_number number
readOnlyHint true openWorldHint true
fema_get_disaster
annotations: verified low

Fetch all designated-area rows for a specific FEMA disaster by disaster number (e.g., 4781).

area string input object state string output object hm_declared boolean incident_type string declaration_date string
readOnlyHint true openWorldHint false
fema_query_dataset
annotations: verified low

Generic OData query against any OpenFEMA v2 dataset — the escape hatch for datasets the

input object notice string offset number output object dataset string total_count number returned_count number
readOnlyHint true openWorldHint true
fema_search_disasters
annotations: verified low

Search federal disaster declarations by state, incident type, declaration type, date range, and county.

input object output object
readOnlyHint true openWorldHint true

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 27

info
Tool 'fema_dataframe_query' annotations are consistent annotation_checker · 80%
info
Tool 'fema_search_nfip' annotations are consistent annotation_checker · 80%
info
Tool 'fema_get_housing_assistance' annotations are consistent annotation_checker · 80%
info
Tool 'fema_dataframe_drop' annotations are consistent annotation_checker · 80%
info
Tool 'fema_dataframe_describe' annotations are consistent annotation_checker · 80%
info
Tool 'fema_get_public_assistance' annotations are consistent annotation_checker · 80%
info
Tool 'fema_get_disaster' annotations are consistent annotation_checker · 80%
info
Tool 'fema_query_dataset' annotations are consistent annotation_checker · 80%
info
Tool 'fema_search_disasters' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: fema_dataframe_query manifest_parser · 75%
info
Tool: fema_search_nfip manifest_parser · 75%
info
Tool: fema_get_housing_assistance manifest_parser · 75%
info
Tool: fema_dataframe_drop manifest_parser · 75%
info
Tool: fema_dataframe_describe manifest_parser · 75%
info
Tool: fema_get_public_assistance manifest_parser · 75%
info
Tool: fema_get_disaster manifest_parser · 75%
info
Tool: fema_query_dataset manifest_parser · 75%
info
Tool: fema_search_disasters manifest_parser · 75%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 12 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-fema-mcp-server-9a49728/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%