← Back to search

io.github.qso-graph/qrz-mcp

qso-graph Scanned 3h ago

QRZ.com MCP server. Callsign lookup, DXCC resolution, logbook queries via QRZ XML API.

B
78 / 100

Versions

0.2.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

get_version_info
annotations: none low

Get qrz-mcp service version and upstream QRZ API version. Returns the running PyPI version of qrz-mcp and the QRZ.com XML + Logbook API contract in use. Use this to confirm fleet alignment across MCP deployments — agents can compare service_version and spec_version across servers to detect drift without going outside the MCP protocol. Returns: service_name, service_version (PyPI), and spec_version (QRZ API).

qrz_lookup
annotations: none low

Look up a callsign on QRZ.com (name, grid, DXCC, license class, QSL info, image). Requires a QRZ XML Subscription ($35.95/yr) for full fields. Args: persona: Persona name configured in adif-mcp. callsign: Callsign to look up (e.g., W1AW). Returns: Structured record with station details. Fields depend on subscription tier.

persona str callsign str
qrz_dxcc
annotations: none low

Resolve a DXCC entity from a callsign or numeric entity code. Args: persona: Persona name configured in adif-mcp. query: Callsign (e.g., VP8PJ) or DXCC code (e.g., 291). Returns: DXCC entity details (name, continent, CQ/ITU zones, coordinates).

query str persona str
qrz_logbook_status
annotations: none low

Get QRZ logbook statistics (QSO count, DXCC total, date range). Args: persona: Persona name configured in adif-mcp. Returns: Logbook stats including count, confirmed, DXCC entities, US states.

persona str
qrz_download
annotations: none low

Download your complete QRZ logbook as raw ADIF text. Returns the .adi file content — save to disk for import into your logger. Transparently paginates to collect all records. Rate-limited to avoid API bans. Args: persona: Persona name configured in adif-mcp. band: Filter by band (e.g., '20m'). mode: Filter by mode (e.g., 'FT8'). start_date: Date range start (YYYY-MM-DD). end_date: Date range end (YYYY-MM-DD). Returns: Raw ADIF text and record count.

band string mode string persona str end_date string start_date string
qrz_logbook_fetch
annotations: none low

Query QSOs from a QRZ logbook with optional filters. Transparently paginates to collect up to `limit` records. Args: persona: Persona name configured in adif-mcp. band: Filter by band (e.g., '20m'). mode: Filter by mode (e.g., 'FT8'). callsign: Filter by contacted station. dxcc: Filter by DXCC entity code. start_date: Date range start (YYYY-MM-DD). end_date: Date range end (YYYY-MM-DD). confirmed_only: Only return confirmed QSOs. limit: Maximum records to return (default 250). Returns: Total count and list of QSO records.

band string dxcc string mode string limit int persona str callsign string end_date string start_date string confirmed_only bool

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 28

low
Tool 'get_version_info' has no annotations annotation_checker · 100%
low
Tool 'qrz_lookup' has no annotations annotation_checker · 100%
low
Tool 'qrz_dxcc' has no annotations annotation_checker · 100%
low
Tool 'qrz_logbook_status' has no annotations annotation_checker · 100%
low
Tool 'qrz_download' has no annotations annotation_checker · 100%
low
Tool 'qrz_logbook_fetch' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.0 (PYSEC-2026-338) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: get_version_info manifest_parser · 90%
info
Tool: qrz_lookup manifest_parser · 90%
info
Tool: qrz_dxcc manifest_parser · 90%
info
Tool: qrz_logbook_status manifest_parser · 90%
info
Tool: qrz_download manifest_parser · 90%
info
Tool: qrz_logbook_fetch manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%