← Back to search

io.github.cyanheads/imf-mcp-server

cyanheads streamable_http Scanned 2d ago

Query IMF SDMX 3.0 macroeconomic data — 193 dataflows, WEO, BOP, CPI, exchange rates, 190 countries.

B
87.4 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

imf_list_databases
annotations: verified low

List IMF SDMX dataflows available on the portal.

id string input object output object version string agency_id string
readOnlyHint true openWorldHint true idempotentHint true
imf_query_dataset
annotations: verified low

Query an IMF SDMX dataflow by dimension key over a time range.

readOnlyHint true openWorldHint true idempotentHint true
imf_dataframe_describe
annotations: verified low

List DataCanvas tables and columns staged by a prior imf_query_dataset call.

type string input object output object canvas_id string row_count number table_count number
readOnlyHint true openWorldHint false idempotentHint true
imf_dataframe_query
annotations: verified low

Run a read-only SQL SELECT against a DataCanvas table staged by imf_query_dataset.

input object output object
readOnlyHint true openWorldHint false idempotentHint true
imf_dataframe_drop
annotations: verified low

Remove one DataCanvas table or view staged by imf_query_dataset without affecting other tables on the same canvas.

input object output object canvas_id string table_name string
readOnlyHint false openWorldHint false idempotentHint true destructiveHint true
imf_get_database
annotations: verified low

Fetch a dataflow's dimension list with a codelist preview for each dimension.

readOnlyHint true openWorldHint true idempotentHint true

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 22

info
Tool: imf_list_databases manifest_parser · 75%
info
Tool: imf_query_dataset manifest_parser · 75%
info
Tool 'imf_list_databases' annotations are consistent annotation_checker · 80%
info
Tool 'imf_query_dataset' annotations are consistent annotation_checker · 80%
info
Tool 'imf_dataframe_describe' annotations are consistent annotation_checker · 80%
info
Tool 'imf_dataframe_query' annotations are consistent annotation_checker · 80%
info
Tool 'imf_dataframe_drop' annotations are consistent annotation_checker · 80%
info
Tool 'imf_get_database' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: imf_dataframe_describe manifest_parser · 75%
info
Tool: imf_dataframe_query manifest_parser · 75%
info
Tool: imf_dataframe_drop manifest_parser · 75%
info
Tool: imf_get_database manifest_parser · 75%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 12 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-imf-mcp-server-73fadb4/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%