← All MCP servers
MCP server
io.github.urbankitstudio/mcp-atlas
mcp:urbankitstudio/mcp-atlas
Owner and APN lookup across 499 US counties (497 ArcGIS endpoints). No API key needed.
Verdict
Inconclusive
The analysis could not cover enough of the artifact to decide.
0
findings
—
highest severity
0
threat classes
26
files scanned
243/243
checks satisfied
0
package advisories
Why this verdict
- inconclusive: gap dynamic_metadata at src/server.ts
Security findings 0
No individual findings recorded
The inconclusive verdict rests on the coverage gaps below.
Execution chain 142
What it calls, runs, installs, reads and writes, with the line that does it.
Files read 1
<dynamic>
src/server.ts:53 · read
GitHub repositories 3
urbankitstudio/mcp-atlas
package.json:25 · url
urbankitstudio/mcp-atlas
package.json:28 · url
urbankitstudio/mcp-atlas
server.json:6 · url
Packages 1
npm:@urbankitstudio/mcp-atlas@0.3.10
server.json:13 · launch:server.json
URLs 137
https://github.com/sponsors/colinhacks
https://github.com/sponsors/epoberezkin
https://github.com/sponsors/express-rate-limit
https://github.com/sponsors/fastify
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/ljharb
https://github.com/sponsors/panva
https://github.com/sponsors/sindresorhus
https://github.com/urbankitstudio/mcp-atlas
https://github.com/urbankitstudio/mcp-atlas.git
https://github.com/urbankitstudio/mcp-atlas/issues
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/express
https://opencollective.com/fastify
https://registry.npmjs.org/@hono/node-server/-/node-server-2.1.0.tgz
https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.1.tgz
https://registry.npmjs.org/@types/node/-/node-26.0.0.tgz
https://registry.npmjs.org/@urbankitstudio/atlas/-/atlas-0.6.40.tgz
https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz
https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz
https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz
https://registry.npmjs.org/body-parser/-/body-parser-2.3.0.tgz
https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz
https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz
https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz
https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz
https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz
https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz
https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz
https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz
https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz
https://registry.npmjs.org/cors/-/cors-2.8.6.tgz
https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz
https://registry.npmjs.org/debug/-/debug-4.4.3.tgz
https://registry.npmjs.org/depd/-/depd-2.0.0.tgz
https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz
https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz
https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz
https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz
https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz
https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz
https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz
https://registry.npmjs.org/etag/-/etag-1.8.1.tgz
https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.0.tgz
https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz
https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.2.tgz
https://registry.npmjs.org/express/-/express-5.2.1.tgz
https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz
https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz
https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz
https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz
https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz
https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz
https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz
https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz
https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz
https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz
https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz
https://registry.npmjs.org/hono/-/hono-4.13.13.tgz
https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz
https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz
https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz
https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz
https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz
https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz
https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz
https://registry.npmjs.org/jose/-/jose-6.2.3.tgz
https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz
https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-8.0.2.tgz
https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz
https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz
https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz
https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz
https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz
https://registry.npmjs.org/ms/-/ms-2.1.3.tgz
https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz
https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz
https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz
https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz
https://registry.npmjs.org/once/-/once-1.4.0.tgz
https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz
https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz
https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.2.tgz
https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.1.tgz
https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.8.tgz
https://registry.npmjs.org/qs/-/qs-6.16.0.tgz
https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz
https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz
https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz
https://registry.npmjs.org/router/-/router-2.2.0.tgz
https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz
https://registry.npmjs.org/send/-/send-1.2.1.tgz
https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz
https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz
https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz
https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz
https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz
https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz
https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz
https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz
https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz
https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz
https://registry.npmjs.org/type-is/-/type-is-2.1.0.tgz
https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz
https://registry.npmjs.org/undici-types/-/undici-types-8.3.0.tgz
https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz
https://registry.npmjs.org/vary/-/vary-1.1.2.tgz
https://registry.npmjs.org/which/-/which-2.0.2.tgz
https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz
https://registry.npmjs.org/zod-to-json-schema/-/zod-to-json-schema-3.25.2.tgz
https://registry.npmjs.org/zod/-/zod-4.4.3.tgz
https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json
https://urbankitstudio.com
https://urbankitstudio.com/parcel-atlas
https://urbankitstudio.com/tools/parcel-lookup?endpoint=$
Coverage gaps 1
Parts of the artifact the static analysis could not fully examine.
dynamic_metadata line 179: tool 'list_counties' description is computed: `Browse what the atlas covers. Answers "is this county covered?" and "what can I search there?" with one line per countysrc/server.ts