Atlas / MCP servers / programcomputer / NASA Data Interface

NASA Data InterfaceSAFE

mcp/programcomputer/nasa-data-interface

A Model Context Protocol (MCP) server for NASA APIs, providing a standardized interface for AI models to interact with NASA's vast array of data sources.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
47 44r · 3w · 0d
Transport
stdio · streamable-http
License
ISC
Stars
93
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/@programcomputer/nasa-mcp-server)

A Model Context Protocol (MCP) server for NASA APIs, providing a standardized interface for AI models to interact with NASA's vast array of data sources. This server implements the official Model Context Protocol specification.

Big thanks to the MCP community for their support and guidance!

Features

  • Access to 20+ NASA data sources through a single, consistent interface
  • Standardized data formats optimized for AI consumption
  • Automatic parameter validation and error handling
  • Rate limit management for NASA API keys
  • Comprehensive documentation and examples
  • Support for various NASA imagery formats
  • Data conversion and formatting for LLM compatibility
  • Cross-platform support (Windows, macOS, Linux)

Example prompts

Ask your MCP client things like:

  • "Show me today's Astronomy Picture of the Day and explain what it shows."
  • "Were there any solar storms in September 2026: strong flares, Earth-directed CMEs or geomagnetic storms?"
  • "Which asteroids fly past Earth today, and which one comes closest?"
  • "Will any asteroid pass closer to Earth than the Moon in the next 90 days?"
  • "What are the odds that Bennu hits Earth, according to JPL Sentry?"
  • "Find NASA photos of the Apollo 11 lunar module taken in 1969."
  • "Which tropical storms and hurricanes are active right now?"
  • "Show me a detailed satellite view of the Nile Delta and the Sinai on 2025-07-15."
  • "Find cloud-hosted sea ice concentration datasets in NASA Earthdata."
  • "What were the daily highs, lows and solar energy in Denver during the first week of July 2025?"
  • "List the nearest roughly Earth-sized, temperate exoplanets discovered since 2020."
  • "Where was the ISS over the Earth between 00:00 and 00:10 UTC on 2026-09-29?"
  • "Get the latest t
Read from source at commit 052dbeb92799OBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add nasa-mcp-server --env FIRMS_MAP_KEY=${FIRMS_MAP_KEY} -- npx -y @programcomputer/[email protected]
claude-desktop
{
  "mcpServers": {
    "nasa-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@programcomputer/[email protected]"
      ],
      "env": {
        "FIRMS_MAP_KEY": "${FIRMS_MAP_KEY}"
      }
    }
  }
}
03

Exposed tools (47)

44 read · 3 write · 0 destructive.

ToolRiskDescription
bodyreadBody (default Earth)
collectionreadImage collection (
datereadDate of the picture (YYYY-MM-DD); defaults to the latest
date_maxreadEnd date (YYYY-MM-DD)
date_minwriteStart date (YYYY-MM-DD)
dist_maxreadMaximum distance, e.g. 0.05 (au) or 10LD
end_datereadEnd of a date range (YYYY-MM-DD)
energy_minreadMinimum radiated energy (1e10 J)
jpl-sbdbreadSBDB record for an asteroid or comet name/designation, fetched on read.
jpl_cadreadAsteroid and comet close approaches to the planets, past and future, from the JPL SBDB Close-Approach Data API.
jpl_fireballreadFireball (bolide) events reported by US Government sensors, from the JPL Fireball API.
jpl_horizonsreadEphemerides and object data for solar-system bodies from the JPL Horizons API (GET).
jpl_horizons_filewriteSame as jpl_horizons, but submits the parameters as a Horizons input file (POST to horizons_file.api).
jpl_jd_calreadConvert between Julian dates and calendar dates (UTC) with the JPL JD-Calendar API.
jpl_mission_designreadBallistic mission options to asteroids and comets from the JPL Small-Body Mission Design API. Object mode (des, spk or sstr) returns the pre-computed
jpl_nhatsreadNear-Earth objects accessible to human missions (NHATS): a constrained summary list, or one object by des/spk.
jpl_periodic_orbitsreadPeriodic orbits (halo, DRO, Lyapunov, ...) in three-body systems from the JPL Three-Body Periodic Orbits database.
jpl_sbdbreadOrbital and physical data for one asteroid or comet from the JPL Small-Body Database (SBDB).
jpl_scoutreadJPL Scout trajectory analysis and hazard assessment for unconfirmed objects on the Minor Planet Center NEO Confirmation Page.
jpl_sentryreadEarth impact risk assessments from JPL Sentry: summary table, one object, virtual impactors, or removed objects.
nasa-apodreadAPOD metadata (title, explanation, image or video URL) for a date, or the latest picture when date is empty, fetched from science.nasa.gov on read. No API key needed.
nasa-epicreadDSCOVR EPIC image metadata for a date and collection (natural or enhanced), fetched on read.
nasa_apodreadNASA
nasa_cmrreadSearch NASA\
nasa_donkireadSpace Weather Database Of Notifications, Knowledge, Information (DONKI) events by type for up to 30 days at a time, from the NASA CCMC DONKI API
nasa_eonetreadNatural events (wildfires, storms, volcanoes, ice, ...) from the Earth Observatory Natural Event Tracker. Filters are sent exactly as given; no automatic broadening.
nasa_epicreadEarth Polychromatic Imaging Camera (DSCOVR) full-disc Earth images for a day: metadata for every image plus a bounded number embedded.
nasa_exoplanetreadQuery the NASA Exoplanet Archive through its TAP service (ADQL). Tables use current TAP names such as ps, pscomppars, cumulative and toi.
nasa_firmsreadActive fire/thermal anomaly detections from NASA FIRMS for a bounding box and 1-5 day window. Requires FIRMS_MAP_KEY (not NASA_API_KEY).
nasa_gibsreadRender a Global Imagery Browse Services (GIBS) layer for a date and bounding box as an image (WMS GetMap, EPSG:4326).
nasa_imagesreadSearch NASA
nasa_insight_weatherreadHISTORICAL DATA ONLY: per-sol Mars surface weather (air temperature, pressure, wind) from NASA
nasa_mars_roverreadDEPRECATED: the upstream Mars Rover Photos API (api.nasa.gov/mars-photos) has been returning HTTP 404
nasa_neoreadNear-Earth asteroid close approaches from NASA NeoWs: a feed for up to 7 days (defaults to today, UTC) or a single asteroid by ID. Requires NASA_API_KEY.
nasa_osdr_filesreadList the data files (with download links) for a NASA Open Science Data Repository (OSDR) study.
nasa_powerreadDaily solar and meteorological data for a point from NASA POWER (Prediction Of Worldwide Energy Resources).
nasa_ssc_locationsreadPositions of spacecraft (and the Moon and Sun) over a time range from the NASA Satellite Situation Center (SSCWeb), in geophysical coordinate systems
nasa_ssc_observatoriesreadSpacecraft and other observatories whose locations the NASA Satellite Situation Center (SSCWeb) can compute, with their data time ranges and resolution.
nasa_techportreadNASA
nasa_techtransferreadSearch NASA
nasa_tlereadTwo-line element sets (TLE) for Earth-orbiting satellites from the TLE API in the api.nasa.gov catalog (tle.ivanstanojevic.me; CelesTrak data refreshed daily):
nasa_trek_layersreadSearch the map layer catalogs of NASA Mars Trek, Moon Trek and Vesta Trek (trek.nasa.gov): mosaics, colour hillshades and other imagery
nasa_trek_tilereadOne WMTS map tile image from NASA Mars Trek, Moon Trek or Vesta Trek for a layer from nasa_trek_layers, addressed by zoom/row/col
object_namereadName or designation (e.g.
spk_idreadSPK-ID of the object
start_datewriteStart of a date range (YYYY-MM-DD)
test_probereadprobe tool
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (5 observation(s))
Network
declared (1 observation(s))
Shell
declared (2 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (12)

LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
scripts/package-smoke.mjs:42
shasum: createHash('sha1').update(bytes).digest('hex'),
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/handlers/jpl/cad.ts:2
import { defineTool, READ_ONLY_REMOTE } from '../../tools/types';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/handlers/jpl/common.ts:1
import type { ToolContext } from '../../tools/types';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/handlers/jpl/common.ts:2
import { httpRequest, type HttpResponse } from '../../util/http';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/handlers/jpl/fireball.ts:2
import { defineTool, READ_ONLY_REMOTE } from '../../tools/types';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/handlers/jpl/horizons.ts:2
import { defineTool, READ_ONLY_REMOTE, type ToolContext, type ToolOutput } from '../../tools/types';
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:252
http://127.0.0.1:3000/mcp
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:479
new URL("http://127.0.0.1:3000/mcp")
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
test/helpers/mock-cmr-server.ts:19
const url = new URL(req.url ?? '/', 'http://127.0.0.1');
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
test/helpers/mock-cmr-server.ts:42
url: `http://127.0.0.1:${port}/search`,
LOWObfuscation / stealth · obf.zero_width · CWE-506, CWE-94
test/unit/util.test.ts:22
const table = parseCsv('latitude,longitude\n10,20\n\n30,40');
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, dotenv, zod, @eslint/js, @types/express, @types/node, eslint, typescript
Why it matters. 9 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 052dbeb92799full audit observations/trust-audit/mcp-server/programcomputer__nasa-data-interface.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-07052dbeb92799SAFEB89first audit
06

Questions

What is the NASA Data Interface MCP server?

A Model Context Protocol (MCP) server for NASA APIs, providing a standardized interface for AI models to interact with NASA's vast array of data sources.

What tools does NASA Data Interface expose?

47 in total: 44 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is NASA Data Interface safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does NASA Data Interface need?

It reads FIRMS_MAP_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does NASA Data Interface run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @programcomputer/nasa-mcp-server at 1.2.0.

How current is this page?

The grade is for one exact copy of the source (052dbeb92799), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement