← Back to search

io.github.qso-graph/eqsl-mcp

qso-graph Scanned 28d ago

eQSL.cc MCP server. Inbox download, QSO verification, Authenticity Guaranteed status.

MCP Registry ↗
C
73.7 / 100

Versions

0.2.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

eqsl_verify
annotations: none low

Check if a specific QSO exists in eQSL (public, no auth required). Args: from_call: Sender's callsign. to_call: Receiver's callsign. band: Band (e.g., '20m'). qso_date: QSO date in YYYY-MM-DD format. mode: Mode (exact match — use 'USB' not 'SSB', 'PSK31' not 'PSK'). Returns: Whether the QSO is verified, AG status, and the raw message.

band str mode string to_call str qso_date str from_call str
get_version_info
annotations: none low

Get eqsl-mcp service version and upstream eQSL.cc endpoint version. Returns the running PyPI version of eqsl-mcp and the eQSL.cc endpoint contract in use. Use this to confirm fleet alignment across MCP deployments — agents can compare service_version and spec_version across servers to detect drift without going outside the MCP protocol. Returns: service_name, service_version (PyPI), and spec_version (eQSL.cc endpoint).

eqsl_inbox
annotations: none low

Download incoming eQSLs (confirmations others have sent you). Args: persona: Persona name configured in adif-mcp. since: Only records added since this date (YYYY-MM-DD). Default: last 30 days. confirmed_only: Only return records you have confirmed back. unconfirmed_only: Only return records you have NOT confirmed. qth_nickname: QTH profile name (for multi-QTH callsigns). Returns: Total count, confirmed count, breakdown by band, and QSO records.

since string persona str qth_nickname string confirmed_only bool unconfirmed_only bool
eqsl_ag_check
annotations: none low

Check if a callsign has Authenticity Guaranteed (AG) status on eQSL. Public, no auth required. Uses a cached copy of the AG member list (refreshed every 4 hours). Args: callsign: The callsign to check. Returns: Callsign and AG status.

callsign str
eqsl_download
annotations: none low

Download your complete eQSL inbox as raw ADIF text. Returns the .adi file content — save to disk for import into your logger. Omit 'since' to download your entire inbox history. Args: persona: Persona name configured in adif-mcp. since: Only records added since this date (YYYY-MM-DD). Omit for full history. qth_nickname: QTH profile name (for multi-QTH callsigns). Returns: Raw ADIF text and record count.

since string persona str qth_nickname string
eqsl_last_upload
annotations: none low

Check when a persona last uploaded QSOs to eQSL. Args: persona: Persona name configured in adif-mcp. Returns: Persona name and last upload timestamp.

persona str

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 29

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Tool 'get_version_info' has no annotations annotation_checker · 100%
low
Tool 'eqsl_inbox' has no annotations annotation_checker · 100%
low
Tool 'eqsl_verify' has no annotations annotation_checker · 100%
low
Tool 'eqsl_ag_check' has no annotations annotation_checker · 100%
low
Tool 'eqsl_download' has no annotations annotation_checker · 100%
low
Tool 'eqsl_last_upload' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-338) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: get_version_info manifest_parser · 90%
info
Tool: eqsl_inbox manifest_parser · 90%
info
Tool: eqsl_verify manifest_parser · 90%
info
Tool: eqsl_ag_check manifest_parser · 90%
info
Tool: eqsl_download manifest_parser · 90%
info
Tool: eqsl_last_upload manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (4) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%