Atlas / MCP servers / pipeworx-io / mcp-law-commission

mcp-law-commissionSAFE

mcp/pipeworx-io/mcp-law-commission

Law Commission of England & Wales — publications and law-reform projects.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
1 0r · 1w · 0d
Transport
stdio · streamable-http
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Consultation papers, reports, summaries and law-reform projects published by the Law Commission of England & Wales (lawcom.gov.uk) — the independent statutory body that reviews the law and recommends reform to Parliament.

Part of Pipeworx — an MCP gateway connecting AI agents to 1683+ live data sources.

Tools

  • search_law_commission_publications(query?, limit?) — search publication

titles and body text; returns title, link, date and excerpt.

  • get_law_commission_publication(id?, link?) — fetch one publication's full

text, the law-reform project it belongs to, and any attached PDF reports.

  • list_law_commission_projects(status?, limit?) — list law-reform

workstreams, optionally filtered to current, completed, upcoming or other.

Auth

Keyless. No signup, no key.

Data sources

  • — publications (275 live,

probed 2026-09-18), custom WordPress post type.

  • — law-reform projects (118 live).
  • > — attached PDFs.
  • — the four status terms

(current, completed, upcoming-projects-current, other) used to resolve the status filter on list_law_commission_projects.

Welsh-language duplicates

Every publication and project the Commission issues in Welsh is a separate WordPress post — same report, same date, its own numeric id — carrying a language taxonomy term (Cymraeg, the only term the language taxonomy has; English posts carry no term at all, since English is the unmarked default). A plain title search for "leasehold" returns both "Commercial leasehold: overcoming barriers to transactions" (English) and "Lesddaliad masnachol: goresgyn rhwystrau rhag trafodion" (the same report, in Welsh) as two hits.

search_law_commission_publications and `listlawcommissi

Read from source at commit 4060a71112b3OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add mcp-law-commission -- npx -y @pipeworx/[email protected]
claude-desktop
{
  "mcpServers": {
    "mcp-law-commission": {
      "command": "npx",
      "args": [
        "-y",
        "@pipeworx/[email protected]"
      ]
    }
  }
}
03

Exposed tools (1)

0 read · 1 write · 0 destructive.

ToolRiskDescription
list_law_commission_projectswriteList law-reform projects run by the Law Commission of England & Wales (lawcom.gov.uk/project) — the workstreams under which its consultation papers and reports are published, e.g.
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (1)

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, tsx, typescript, @cloudflare/workers-types
Why it matters. 4 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 4060a71112b3full audit observations/trust-audit/mcp-server/pipeworx-io__mcp-law-commission.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-114060a71112b3SAFEB89first audit
06

Questions

What is the mcp-law-commission MCP server?

Law Commission of England & Wales — publications and law-reform projects.

What tools does mcp-law-commission expose?

1 in total: 0 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is mcp-law-commission safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does mcp-law-commission need?

No credential environment variables were found in its source, so it appears to need none.

How does mcp-law-commission run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @pipeworx/mcp-law-commission at 0.1.1.

How current is this page?

The grade is for one exact copy of the source (4060a71112b3), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement