mcp-iso-neSAFE
Real-time power grid data for ISO New England, the electricity market and grid operator for Connecticut, Maine, Massachusetts, New Hampshire, Rhode Island and Vermont: wholesale electricity prices, system demand, and electricity generation by fuel type.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
ISO New England market data via ISO Express web services — five-minute LMPs, system load and generation fuel mix for the six New England states (CT, MA, ME, NH, RI, VT).
Part of Pipeworx — an MCP gateway connecting AI agents to 1683+ live data sources.
Tools
isone_lmp(location_id?, date?, limit?)— five-minute real-time LMP with energy,
congestion and loss components. Omit date for the current interval.
isone_load(date?, limit?)— five-minute total system load in MW.isone_fuel_mix(date?, limit?)— generation by fuel category (gas, nuclear,
hydro, wind, solar, refuse, wood, coal, oil, landfill gas, imports) with the marginal-fuel flag.
Auth
BYO only today. HTTP Basic against webservices.iso-ne.com. Platform fallback env var — not provisioned: PLATFORM_ISONE_KEY.
Registration is free at (an "ISO Express / Web Services" account), but ISO-NE approves the account before the credentials work. A brand-new registration is refused exactly like a wrong password, so the pack's 401 message names the approval step rather than implying the password is wrong.
_apiKey accepts either spelling:
"username:password"— plain; the pack base64-encodes it.base64("username:password")— pre-encoded, same convention asseo-serp.
Anything else fails locally with a clear message instead of becoming a bare upstream 401 that looks like an outage.
One env var, not `PLATFORM_ISONE_USER` + `PLATFORM_ISONE_PASS`: the gateway injects exactly one secret per pack, into _apiKey. So the stored credential is the single string the Basic scheme actually needs. The pack is marked byoExpected: true in workers/gateway/src/pack-manifest.json so the vendor-key ratchet does not fail the deploy; drop it the day the credential lands.
Data sources
- — the authenticated API.
`/fivemi
1143289d2b5dOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-iso-ne -- npx -y @pipeworx/[email protected]
{
"mcpServers": {
"mcp-iso-ne": {
"command": "npx",
"args": [
"-y",
"@pipeworx/[email protected]"
]
}
}
}Exposed tools (3)
3 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
isone_fuel_mix | read | ISO New England generation by fuel category in MW — natural gas, nuclear, hydro, wind, solar, refuse, wood, coal, oil, landfill gas and net interchange with neighbouring grids — with the marginal-fuel flag ISO-NE publishes alongside it. Use for |
isone_lmp | read | ISO New England five-minute real-time locational marginal prices (LMP $/MWh) with their energy, congestion and loss components, for the eight New England load zones and hubs. ISO-NE runs the grid and wholesale market for CT, MA, ME, NH, RI and VT. Use for |
isone_load | read | ISO New England system load (total electricity demand) in MW at five-minute resolution for the six-state New England footprint. Use for |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
if (atob(credential).includes(':')) return credential;@modelcontextprotocol/sdk, tsx, typescript, @cloudflare/workers-types
Gates applied: no_behavioural_pass.
1143289d2b5dfull audit observations/trust-audit/mcp-server/pipeworx-io__mcp-iso-ne.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 1143289d2b5d | SAFE | B | 89 | first audit |
Questions
What is the mcp-iso-ne MCP server?
Real-time power grid data for ISO New England, the electricity market and grid operator for Connecticut, Maine, Massachusetts, New Hampshire, Rhode Island and Vermont: wholesale electricity prices, system demand, and electricity generation by fuel type.
What tools does mcp-iso-ne expose?
3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is mcp-iso-ne safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does mcp-iso-ne need?
No credential environment variables were found in its source, so it appears to need none.
How does mcp-iso-ne run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @pipeworx/mcp-iso-ne at 0.1.1.
How current is this page?
The grade is for one exact copy of the source (1143289d2b5d), read on 2026-10-11. The repository is watched and re-audited when it changes.