← Back to search

io.github.qso-graph/iota-mcp

qso-graph Scanned 3d ago

Islands on the Air MCP server. Group lookup, island search, DXCC mapping, nearby groups.

C
72.8 / 100

Versions

0.1.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

get_version_info
annotations: none low

Get iota-mcp service version and upstream programme data version. Returns the running PyPI version of iota-mcp and the IOTA programme data revision in use. Use this to confirm fleet alignment across MCP deployments — agents can compare service_version and spec_version across servers to detect drift without going outside the MCP protocol. Returns: service_name, service_version (PyPI), and spec_version (IOTA programme data).

iota_lookup
annotations: none low

Look up an IOTA group by reference number. Returns group details including name, DXCC entity, bounding box, center coordinates, credit percentage, and island count. Args: refno: IOTA reference number (e.g., NA-005, EU-005, AF-001). Returns: Group details with coordinates, DXCC mapping, and island count.

refno str
iota_search
annotations: none low

Search IOTA groups and islands by name. Searches both group names and individual island names. Results are deduplicated by IOTA reference number. Args: query: Search text (e.g., Hawaii, Shetland, Comoro). limit: Maximum results to return (default 25). Returns: List of matching IOTA groups with details.

limit string query str
iota_islands
annotations: none low

List all islands and subgroups in an IOTA group. Returns the full hierarchy: subgroups containing individual islands. Args: refno: IOTA reference number (e.g., NA-005, EU-005). Returns: Subgroup hierarchy with island names and IDs.

refno str
iota_dxcc
annotations: none low

Bidirectional DXCC-to-IOTA mapping. Provide either dxcc_num to find all IOTA groups for a DXCC entity, or refno to find which DXCC entities an IOTA group belongs to. Args: dxcc_num: DXCC entity number (e.g., 291 for USA, 223 for England). refno: IOTA reference number (e.g., EU-005). Returns: Mapping between DXCC entities and IOTA groups.

refno string dxcc_num string
iota_stats
annotations: none low

Get IOTA programme summary statistics. Returns total groups and islands, breakdown by continent, DXCC entity count, and most/least credited groups. Returns: Programme-wide statistics and summaries.

iota_nearby
annotations: none low

Find IOTA groups nearest to a location. Computes great-circle distance from the given coordinates to the center of each IOTA group's bounding box. Args: latitude: Latitude in decimal degrees (e.g., 43.6 for Boise). longitude: Longitude in decimal degrees (e.g., -116.2 for Boise). limit: Maximum results to return (default 20). Returns: List of nearest IOTA groups sorted by distance in km.

limit string latitude float longitude float

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 31

low
Tool 'get_version_info' has no annotations annotation_checker · 100%
low
Tool 'iota_lookup' has no annotations annotation_checker · 100%
low
Tool 'iota_search' has no annotations annotation_checker · 100%
low
Tool 'iota_islands' has no annotations annotation_checker · 100%
low
Tool 'iota_dxcc' has no annotations annotation_checker · 100%
low
Tool 'iota_stats' has no annotations annotation_checker · 100%
low
Tool 'iota_nearby' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-338) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: get_version_info manifest_parser · 90%
info
Tool: iota_lookup manifest_parser · 90%
info
Tool: iota_search manifest_parser · 90%
info
Tool: iota_islands manifest_parser · 90%
info
Tool: iota_dxcc manifest_parser · 90%
info
Tool: iota_stats manifest_parser · 90%
info
Tool: iota_nearby manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%