Atlas / MCP servers / ianderso / familysearch-mcp

familysearch-mcpSAFE

mcp/ianderso/familysearch-mcp

MCP server for genealogical research on FamilySearch: a historical place gazetteer, indexed record search, page images, and shared-tree reads. Bring your own registered application.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
stdio
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/ianderso/familysearch-mcp/actions/workflows/ci.yml) [](https://pypi.org/project/familysearch-mcp/)

An MCP server for genealogical research on FamilySearch: a historical place gazetteer, indexed record search, the page images behind the records, and reads of the shared family tree.

Nothing here writes to FamilySearch. The shared tree is community-edited and conflations of same-named people are common, so a tree result is a hint: follow it to the underlying record and cite that.

This is an independent project. It is not made, endorsed or supported by FamilySearch.

Credentials

This package ships no client id and never handles a FamilySearch password. Records, images and the tree need an access token from your own registered FamilySearch application; docs/AUTH.md explains why, and how to get one.

The gazetteer, the collection catalogue and the film browser answer without a token, so they work on a fresh install with no setup at all.

Install

uvx familysearch-mcp

That runs the server over stdio, which is how an MCP client starts it. You normally put it in the client's configuration rather than running it yourself.

Claude Desktop

{
"mcpServers": {
"familysearch": {
"command": "uvx",
"args": ["familysearch-mcp"],
"env": { "FS_ENV_FILE": "/path/to/familysearch.env" }
}
}
}

Point at an env file rather than pasting the token into env. A token that lives in the client's config can only be replaced by editing it and restarting; a token in the file is picked up mid-session. With no token at all, leave env out and the anonymous tools still work.

Claude Code

claude mcp add familysearch 
Read from source at commit d6b3c35e260eOBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (pypi)
claude mcp add familysearch-mcp --env FS_ACCESS_TOKEN=${FS_ACCESS_TOKEN} -- uvx familysearch-mcp==1.4.0
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (5 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (4)

LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
tests/test_images.py:253
".ssh/authorized_keys",
Why it matters. touches a credential store
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tests/test_tool_contract.py:473
["K2ZP-VY1/../../users/current", "442?access_token=x", "../..", "K2ZP VY1", ""],
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tests/test_tool_contract.py:525
bad = "https://www.familysearch.org/ark:/61903/../../users/current?access_token=x"
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha d6b3c35e260efull audit observations/trust-audit/mcp-server/ianderso__familysearch-mcp.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11d6b3c35e260eSAFEB89first audit
05

Questions

What is the familysearch-mcp MCP server?

MCP server for genealogical research on FamilySearch: a historical place gazetteer, indexed record search, page images, and shared-tree reads. Bring your own registered application.

Is familysearch-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does familysearch-mcp need?

It reads FS_ACCESS_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does familysearch-mcp run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as familysearch-mcp.

How current is this page?

The grade is for one exact copy of the source (d6b3c35e260e), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement