← Back to search

io.github.matematicsolutions/fi-eli-mcp

matematicsolutions Scanned 20d ago

MCP server for Finnish Finlex consolidated statutes: ELI identifiers and verifiable citations.

C
71.1 / 100

Versions

0.1.0latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

fi_list_acts
annotations: none low

List Finnish statutes published in a given year. Args: year: e.g. ``2018``. Returns: ``ActListResult`` with ``items: list[Act]``, each carrying the citation contract.

year int
fi_get_act
annotations: none low

Fetch statute metadata by year and number. Args: year: e.g. ``2018``. number: e.g. ``1050``. Returns: ``Act`` with ``eli_uri``, ``human_readable_citation``, ``source_url``.

year int number int
fi_coverage
annotations: none low

Declare what this connector covers, how it is sourced, and what it does NOT cover. Call this before telling a user that the law "does not contain" something, and whenever a search comes back empty: the absence may be a gap in this connector rather than in the law. Every gap carries a fallback saying where to look instead. Returns: ``Coverage`` with families, an as-of note, and a non-empty list of known gaps.

fi_get_text
annotations: none low

Fetch the full Akoma Ntoso text of a statute by year and number. Args: year: e.g. ``2018``. number: e.g. ``1050``. Returns: ``LawText`` with ``eli_uri``, ``human_readable_citation``, ``source_url`` and ``content`` (Akoma Ntoso XML).

year int number int

Permissions 3

network medium
Server uses network capabilities via: httpx, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 38

low
Tool 'fi_list_acts' has no annotations annotation_checker · 100%
low
Tool 'fi_get_act' has no annotations annotation_checker · 100%
low
Tool 'fi_coverage' has no annotations annotation_checker · 100%
low
Tool 'fi_get_text' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Vulnerable dependency: diskcache@5.6 (GHSA-w8v5-vhqr-4h9v) dependency_analyzer · 95%
medium
Vulnerable dependency: diskcache@5.6 (PYSEC-2026-2447) dependency_analyzer · 95%
medium
Vulnerable dependency: anyio@4.3 (GHSA-5p39-cfhj-2xmp) dependency_analyzer · 95%
medium
Vulnerable dependency: anyio@4.3 (GHSA-82r6-8w77-94w6) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: fi_list_acts manifest_parser · 90%
info
Tool: fi_get_act manifest_parser · 90%
info
Tool: fi_coverage manifest_parser · 90%
info
Tool: fi_get_text manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'fi_coverage': Cross-tool sequencing directive poisoning · 85%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%