Atlas / MCP servers / daniel-filius / apuracao-2026-mcp

apuracao-2026-mcpSAFE

mcp/daniel-filius/apuracao-2026-mcp

Servidor MCP + bot Telegram com os resultados oficiais parciais das eleições brasileiras 2026, direto da divulgação do TSE

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
stdio
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Resultados oficiais e parciais das eleições brasileiras, direto dos arquivos públicos da divulgação do TSE (resultados.tse.jus.br), como tools MCP para Claude, Cursor, VS Code e qualquer cliente Model Context Protocol — e, opcionalmente, como bot inline do Telegram.

  • 1o turno 04/10/2026 (totalizado, validado ao vivo) · 2o turno: domingo 25/10/2026 — use turno=2
  • Sem chave, sem cadastro: o TSE publica os JSON abertamente. Este projeto só decifra os códigos

(sp-c0003-e006259-u.json...), faz cache respeitoso (≥ 45 s por arquivo, If-Modified-Since) e normaliza a resposta. Em 2026 o TSE publica o agregado UF/BR no mesmo formato "completo" (dados//-c-e-u.json) do arquivo por município; o simplificado (dados-simplificados/...-r.json, 2022) saiu do portal — a v0.1.1 lê os dois e escolhe o que existe.

  • Neutralidade: só números oficiais, sempre com apurado_pct e o horário do TSE. Nenhuma

projeção, nenhum comentário, nenhum anúncio.

curado e auto-verificado de servidores MCP e skills brasileiros (categoria Eleições / Governo).

Instalar

Docker (imagem publicada em ghcr.io)

docker run -i --rm ghcr.io/daniel-filius/apuracao-2026-mcp:v0.1.1

Claude Desktop (claude_desktop_config.json) / Cursor / VS Code (mcp.json):

{
"mcpServers": {
"apuracao-2026": {
"command": "docker",
"args": ["run", "-i", "--rm", "ghcr.io/daniel-filius/apuracao-2026-mcp:v0.1.1"]
}
}
}

Sem Docker (Python 3.11+ e uv)

uvx --from git+https://github.com/daniel-filius/apuracao-2026-mcp apuracao-mcp
{
"mcpServers": {
"apuracao-2026": {
"command": "uvx",
"args":
Read from source at commit 023260647d35OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (oci)
claude mcp add apuracao-2026-mcp:v0.1.1 -- docker run -i --rm ghcr.io/daniel-filius/apuracao-2026-mcp:v0.1.1:None
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (5 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (2)

LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
apuracao_mcp/bot.py:138
rid = hashlib.sha1(f"{texto}|{r.get('atualizado_em')}".encode()).hexdigest()[:32]
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 023260647d35full audit observations/trust-audit/mcp-server/daniel-filius__apuracao-2026-mcp.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11023260647d35SAFEB89first audit
05

Questions

What is the apuracao-2026-mcp MCP server?

Servidor MCP + bot Telegram com os resultados oficiais parciais das eleições brasileiras 2026, direto da divulgação do TSE

Is apuracao-2026-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does apuracao-2026-mcp need?

No credential environment variables were found in its source, so it appears to need none.

How does apuracao-2026-mcp run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as apuracao-2026-mcp.

How current is this page?

The grade is for one exact copy of the source (023260647d35), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement