registry / @cyanheads/socrata-mcp-server / 0.1.10

@cyanheads/socrata-mcp-server@0.1.10

Search and query government open-data portals (Socrata SODA API) via MCP. STDIO or Streamable HTTP.

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Runtime MCP calls can direct HTTPS requests to an arbitrary domain. If configured, the Socrata app token is forwarded in the request header.

Static reason

No blocking static signals were detected.

Trigger

A caller invokes `socrata_get_dataset` or `socrata_query_dataset` with an attacker-controlled `domain`.

Impact

SSRF-like outbound access and disclosure of the optional app token to a chosen HTTPS host.

Mechanism

Unvalidated domain interpolation with token-bearing fetch headers.

Rationale

The package is not malicious, but it has a concrete runtime SSRF/token-forwarding vulnerability because portal domains are not allowlisted or validated before authenticated fetches.

Evidence

package.jsondist/config/server-config.jsdist/services/socrata/socrata-service.jsdist/mcp-server/tools/definitions/get-dataset.tool.jsdist/mcp-server/tools/definitions/query-dataset.tool.jsdist/index.js

Network endpoints3

api.us.socrata.com/api/catalog/v1${domain}/api/views/${datasetId}.json${opts.domain}/resource/${opts.datasetId}.json

@cyanheads/socrata-mcp-server@0.1.10

AI Security Review

Decision evidence

Source & flagged code

Findings