← Back to search

io.github.DanielTomaro13/sportsdata-mcp

DanielTomaro13 Scanned 25d ago

Live sports data & cross-book betting odds — ~500 tools, 28 providers, free, zero-config.

? Not scanned yet

Versions

0.18.2latest
first seen Jul 8, 2026

Tools 5

list_available_groups
annotations: none low

List every tool group across all providers, which are currently enabled, and each provider's auth requirements (env-var names + required/optional). On a fresh install (no groups enabled) this is the only functional tool, so the model can guide the user to enable what they want in sportsdata-mcp.yaml.

list_tools_by_capability
annotations: none low

Discover tools by capability — the unit of cross-provider comparison. Given a slug like 'sport.event_markets', returns every enabled tool exposing it across providers. Pass no argument for the full capability → tools map.

capability string
list_resources
annotations: none low

List all registered MCP resources (capability map, dispatcher catalogues, reference data).

sportsdata_session_stats
annotations: none low

How this server has performed for you THIS session: per-tool call counts, error rates, error codes, latency buckets, and how often a tool succeeded but returned nothing. Useful when a tool seems to be misbehaving — a 100% error rate with code AUTH_REQUIRED means a missing key, while a high `empty` count on a working tool usually means the upstream has no data for what was asked, not that the call is wrong. This is read from local counters. Nothing here has been sent anywhere.

sportsdata_feedback
annotations: none low

Report whether an answer from this server was useful. Call this when a tool gave a wrong, empty or misleading answer — especially if the response shape did not match its description, which is the failure mode the maintainers most need to hear about. Recorded locally. It is only ever transmitted if the operator has explicitly enabled sharing (SPORTSDATA_TELEMETRY=1 plus a configured endpoint), and `note` is sent verbatim, so do not put anything private in it.

note string tool string helpful string

Permissions 4

network medium
Server uses network capabilities via: httpx, urllib
filesystem low
Server uses filesystem capabilities via: os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: subprocess
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 45

low
Tool 'list_available_groups' has no annotations annotation_checker · 100%
low
Tool 'list_tools_by_capability' has no annotations annotation_checker · 100%
low
Tool 'list_resources' has no annotations annotation_checker · 100%
low
Tool 'sportsdata_session_stats' has no annotations annotation_checker · 100%
low
Tool 'sportsdata_feedback' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@0.4,<4 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5,<3 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5,<3 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5,<3 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5,<3 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: pyyaml@6.0,<7 (GHSA-8q59-q68h-6hv4) dependency_analyzer · 95%
medium
Vulnerable dependency: pyyaml@6.0,<7 (GHSA-rprw-h62v-c2w7) dependency_analyzer · 95%
medium
Vulnerable dependency: pyyaml@6.0,<7 (PYSEC-2018-49) dependency_analyzer · 95%
medium
Vulnerable dependency: pyyaml@6.0,<7 (PYSEC-2021-142) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.1,<9 (PYSEC-2026-2132) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_available_groups manifest_parser · 90%
info
Tool: list_tools_by_capability manifest_parser · 90%
info
Tool: list_resources manifest_parser · 90%
info
Tool: sportsdata_session_stats manifest_parser · 90%
info
Tool: sportsdata_feedback manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (31) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%