← Back to search

io.github.cyanheads/met-museum-mcp-server

cyanheads streamable_http Scanned 23d ago

MCP server for The Metropolitan Museum of Art collection — 500K+ artworks with metadata, provenance, and open-access high-res images.

MCP Registry ↗ npm
B
87.4 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

met_list_departments
annotations: verified low

Return the 19 curatorial departments at The Metropolitan Museum of Art, each with its numeric departmentId and display name — the valid values for the met_search_collections departmentId filter.

input object output object
readOnlyHint true idempotentHint true
met_get_object
annotations: verified low

Fetch full records for one or more Met Museum object IDs. Accepts up to 20 IDs per call and returns partial success — a single 404 does not fail the whole batch; per-ID failures are reported separately.

error string input object output object objects array objectID number
readOnlyHint true idempotentHint true
met_search_collections
annotations: verified low

Search the Metropolitan Museum of Art collection by keyword and optional filters.

input object
readOnlyHint true idempotentHint true

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 16

info
Tool 'met_list_departments' annotations are consistent annotation_checker · 80%
info
Tool 'met_get_object' annotations are consistent annotation_checker · 80%
info
Tool 'met_search_collections' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: met_list_departments manifest_parser · 75%
info
Tool: met_get_object manifest_parser · 75%
info
Tool: met_search_collections manifest_parser · 75%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 11 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-met-museum-mcp-server-106acdc/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%