mcp-ofgemSAFE
Ofgem energy data: the UK energy regulator's published statistics on the domestic price cap and what it is made of, wholesale gas and electricity prices, supplier market shares, switching, debt and customer service — as tabular rows, not pictures.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Ofgem energy data — the UK energy regulator's published statistics on the domestic price cap and what it is made of, wholesale gas and electricity prices, supplier market shares, switching, debt and customer service, returned as tabular rows rather than pictures.
Part of Pipeworx — an MCP gateway connecting AI agents to 1683+ live data sources.
Tools
ofgem_datasets(query?, page?)— the Data Portal catalogue (~190 datasets).
Returns dataset_id, the id every other tool here takes.
ofgem_price_cap(payment_method?, periods?)— the default tariff cap by
period, broken into wholesale / network / policy / operating / debt / EBIT / VAT components, for Direct Debit, prepayment or standard credit.
ofgem_dataset_rows(dataset_id, limit?, latest_first?)— the full source
table behind any Data Portal dataset.
Auth
Keyless.
Data sources
- — the Data Portal chart catalogue.
- — the source table for one dataset.
Things worth knowing:
- There is no CKAN, no Opendatasoft and no JSON:API.
data.ofgem.gov.uk
does not resolve at all (no A record; it has MX records only). /jsonapi, /api/v1/datasets and /api/search are 404s. The Data Portal page renders nothing server-side — a plain fetch of /news-and-insight/data/data-portal/all-available-charts contains zero dataset links, so scraping the HTML returns an empty list, not an error.
- The catalogue is `/api/listing/{paragraph_id}`, the endpoint the portal's
own front end calls (found in themes/custom/numiko/dist/filter-listing-legacy-*.js). 2156 is the chart listing's paragraph id. It takes fulltext= and page= (0-based, 24 per page) and reports the match count in meta.count.
- Each catalogue row carries its dataset payload as HTML-escaped JSON inside
a data-js-chart-modal-data attribute on the row's teaser markup,
54bd74ad23f1OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-ofgem -- npx -y @pipeworx/[email protected]
{
"mcpServers": {
"mcp-ofgem": {
"command": "npx",
"args": [
"-y",
"@pipeworx/[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
ofgem_dataset_rows | read | Return the full underlying table for one Ofgem Data Portal dataset as rows and columns — the numbers behind the published chart, not an image. Get the dataset id from ofgem_datasets. Use for |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@modelcontextprotocol/sdk, tsx, typescript, @cloudflare/workers-types
Gates applied: no_behavioural_pass.
54bd74ad23f1full audit observations/trust-audit/mcp-server/pipeworx-io__mcp-ofgem.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 54bd74ad23f1 | SAFE | B | 89 | first audit |
Questions
What is the mcp-ofgem MCP server?
Ofgem energy data: the UK energy regulator's published statistics on the domestic price cap and what it is made of, wholesale gas and electricity prices, supplier market shares, switching, debt and customer service — as tabular rows, not pictures.
What tools does mcp-ofgem expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is mcp-ofgem safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does mcp-ofgem need?
No credential environment variables were found in its source, so it appears to need none.
How does mcp-ofgem run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @pipeworx/mcp-ofgem at 0.1.1.
How current is this page?
The grade is for one exact copy of the source (54bd74ad23f1), read on 2026-10-11. The repository is watched and re-audited when it changes.