Back to MCP Trust Indexm8ven
41
/ 100
9 hours ago
glama

France Data MCP

France Data MCP lets AI agents query, cross-reference and automatically enrich multiple French public registries through a unified MCP interface. France Data MCP provides a French territorial intelligence layer designed for multi-source reasoning and agentic orchestration.

→ cturkieh/france-data-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: AXIOM_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🚨
Known vulnerabilities in dependencies: 2 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 8 credentials: ANS_FHIR_API_KEY, AXIOM_TOKEN, INSEE_SIRENE_API_KEY, SUPABASE_ANON_KEY, SUPABASE_LOCAL_ANON_KEY, SUPABASE_LOCAL_SERVICE_ROLE_KEY, SUPABASE_SERVICE_ROLE_KEY, UPSTASH_REDIS_REST_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 critical

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@2.1.5GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

criticalvitest@2.1.5GHSA-9crc-q9x8-hgqq

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAMELI_PS_CSV_URL
🔐 secretANS_FHIR_API_KEY
configANS_FHIR_BASE_URL
configAXIOM_DATASET
configAXIOM_HOST
🔐 secretAXIOM_TOKEN
configCDS_CSV_URL
configFINESS_CSV_URL
configFORCE_REINGEST
configFRANCE_DATA_IP_SALT
configFRANCE_DATA_MCP_TIMEOUT_MS
configFRANCE_DATA_MCP_URL— Le wrapper forwarde stdio → endpoint HTTPS distant. Aucune DB locale à provisionner. Override possible : =https://mon-miroir.example/mcp.
configGITHUB_OUTPUT
configGITHUB_RUN_URL
🔐 secretINSEE_SIRENE_API_KEY
configIRIS_CONTOURS_URL
configIRIS_FAMILLES_URL
configIRIS_POP_URL
configIRIS_REVENU_URL
configRATE_LIMIT_ENABLED
configRATE_LIMIT_PER_MINUTE
configRPPS_CSV_URL
configSENTRY_DSN
configSENTRY_ENVIRONMENT
configSENTRY_RELEASE
🔐 secretSUPABASE_ANON_KEY
configSUPABASE_DB_CONTAINER
configSUPABASE_DB_DIRECT_URL
🔐 secretSUPABASE_LOCAL_ANON_KEY
🔐 secretSUPABASE_LOCAL_SERVICE_ROLE_KEY
🔐 secretSUPABASE_SERVICE_ROLE_KEY
configSUPABASE_URL
🔐 secretUPSTASH_REDIS_REST_TOKEN
configUPSTASH_REDIS_REST_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/cturkieh-france-data-mcp-1aun4e)](https://m8ven.ai/mcp/cturkieh-france-data-mcp-1aun4e)
commit: 372327ab89eb7ccd8233bf4e61e97c63a34e4b8a
code hash: 11adbe24d4d2c9e3811a0f52d62fb91e8c761c49e0fb0a2a5bf509edcae81dc8
verified: 7/31/2026, 9:22:55 AM
view raw JSON →