0
/ 100
10 days ago
glama

mcp-geo

A research MCP server for UK geospatial and statistical data, enabling AI assistants to query Ordnance Survey and ONS datasets.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Code appears obfuscated
1 file are unreadable to a human reviewer. Cannot audit what they do.
🔐
You'll be asked for 3 credentials: OS_API_KEY, MCP_HTTP_AUTH_TOKEN, MCP_HTTP_JWT_HS256_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configBOUNDARY_CACHE_DSN
configMCP_GEO_LIVE_DB_DSN
🔐 secretOS_API_KEYyour-key-here
configPLAYGROUND_FIXTURE_PORT
configPLAYGROUND_FULL_FRONTEND_PORT
configPLAYGROUND_LIVE_AUDIT_PACK_ROOT
configPLAYGROUND_LIVE_BACKEND_PORT
configPLAYGROUND_LIVE_FRONTEND_PORT
configROUTE_GRAPH_DSN
configROUTE_GRAPH_ENABLED
configVITE_HMR_CLIENT_PORT
configVITE_HMR_HOST
configVITE_PROXY_TARGET
configCODEX_HOME
configMCP_GEO_SKIP_VENV_REEXEC
configLANDIS_PORTAL_HTTP_TIMEOUT
configLANDIS_PORTAL_FORCE_OFFSET
configBOUNDARY_CACHE_ENABLED
configboundary_cache_enabled
configboundary_cache_dsn
configMCP_GEO_BASH_BIN
configOS_API_KEY_FILE, not both. For a secret-file setup and first-run OS Data Hub
configVIRTUAL_ENV
configPYTHONPATH
configMCP_HTTP_SESSION_TTLand MCP_HTTP_SESSION_TOOL_CALL_LIMIT bound session
configMCP_HTTP_SESSION_TOOL_CALL_LIMITMCP_HTTP_SESSION_TTL and bound session
🔐 secretMCP_HTTP_AUTH_TOKENand MCP_HTTP_JWT_HS256_SECRET are included in the
🔐 secretMCP_HTTP_JWT_HS256_SECRETMCP_HTTP_AUTH_TOKEN and are included in the
configMCP_HTTP_AUTH_MODEhs256_jwt enables bearer JWT enforcement.
configMCP_HTTP_JWT_CLOCK_SKEW_SECONDS
configMCP_HTTP_JWT_AUDIENCEMCP_HTTP_JWT_ISSUER, , and
configMCP_HTTP_JWT_ISSUER, MCP_HTTP_JWT_AUDIENCE, and
configMCP_HTTP_JWT_REQUIRED_SCOPESconstrain accepted tokens.
configMCP_HTTP_ELICITATION_TIMEOUT_SECONDS
configOPENSSL_BIN
configMCP_STDIO_FRAMING"": "line",
configMCP_STDIO_TOOL_CONTENT_MAX_BYTES
configMCP_STDIO_LIST_COMPACT
configMCP_STDIO_FALLBACK_BBOX_DEGto control the fallback map span.
configMCP_STDIO_CLAUDE_APPS_CONTENT_MODE
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/chris-page-gov-mcp-geo-4hfuks)](https://m8ven.ai/mcp/chris-page-gov-mcp-geo-4hfuks)
commit: 56683b33c0cd02842b7f3ee465414c68a1f3f2a6
code hash: 4e8f15566838c56f3875e7ab557589d8e7dc9c1b9d79d7ddba340722eb4bb46d
verified: 7/21/2026, 8:58:10 AM
view raw JSON →