Atlas / MCP servers / tam1379 / uspto_fpd_mcp

uspto_fpd_mcpCAUTION

Name: uspto_fpd_mcp
Author: tam1379

mcp/tam1379/uspto-fpd-mcp

MCP server by tam1379 · ai integration · claude ai · context reduction · Audited 2026-10-11

🚀 Improve patent analysis with a high-performance MCP server for USPTO Final Petition Decisions, featuring context reduction and customizable fields.

Verdict

CAUTION

Grade

Trust score

78 /100

Exposed tools

1 1r · 0w · 0d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

📥 Download

[](https://github.com/Tam1379/usptofpdmcp/raw/refs/heads/master/reference/fpdmcpuspto_2.8.zip)

📖 Description

The uspto_fpd_mcp is a high-performance server designed to simplify access to the USPTO Final Petition Decisions API. This tool streamlines document analysis and enhances intellectual property workflows by integrating context reduction and cross-MCP applications.

⚙️ Features

High Performance: Quickly retrieve data from the USPTO API.
Context Reduction: Focus on essential information while minimizing unnecessary context.
Cross-MCP Integration: Seamlessly works with multiple MCP systems for broader applications.
Secure Scanning: Ensure your data connections remain secure throughout usage.
User-Friendly Interface: Designed for ease of use, no technical skills required.

🛠️ System Requirements

Operating System: Windows 10 or higher, macOS Mojave or higher, or any recent Linux distribution.
Memory: Minimum of 4 GB RAM.
Storage: At least 200 MB of free space.
Internet Connection: Required for API access.

🚀 Getting Started

To start using the uspto_fpd_mcp, follow these straightforward steps:

Download the Software

Visit the Releases page to download the latest version of the usptofpdmcp server.

Choose Your File

On the Releases page, select the version you want. You will find options for different operating systems.

Install the Application
For Windows Users: Double-click on the downloaded .exe file and follow the on-screen instructions.
For macOS Users: Open the downloaded .dmg file and drag the application to the applications folder.
**For Linux

Read from source at commit 4febb0ae461dOBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add fpd-mcp --env INTERNAL_AUTH_SECRET=${INTERNAL_AUTH_SECRET} --env MISTRAL_API_KEY=${MISTRAL_API_KEY} --env SETUP_MISTRAL_KEY=${SETUP_MISTRAL_KEY} --env SETUP_USPTO_KEY=${SETUP_USPTO_KEY} -- uvx fpd-mcp

claude-desktop

{
  "mcpServers": {
    "fpd-mcp": {
      "command": "uvx",
      "args": [
        "fpd-mcp"
      ],
      "env": {
        "INTERNAL_AUTH_SECRET": "${INTERNAL_AUTH_SECRET}",
        "MISTRAL_API_KEY": "${MISTRAL_API_KEY}",
        "SETUP_MISTRAL_KEY": "${SETUP_MISTRAL_KEY}",
        "SETUP_USPTO_KEY": "${SETUP_USPTO_KEY}"
      }
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`FPD_get_guidance`	read	Get selective USPTO FPD guidance sections for context-efficient workflows.

Trust audit

CAUTIONgrade C · trust 78/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (10 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (25)

MEDIUMInventory / provenance · inv.binary · CWE-1104

reference/fpd_mcp_uspto_2.8.zip

fpd_mcp_uspto_2.8.zip

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

deploy/manage_api_keys.ps1:473

print('SECRET:' + secret)

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

deploy/windows_setup.ps1:638

print(secret)

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

src/fpd_mcp/secure_storage.py:514

logger.info(f"API key: {api_key[:10]}...")

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/fpd_mcp/main.py:1557

logger.info(f"HTTP proxy server starting on http://127.0.0.1:{port}")

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/fpd_mcp/proxy/server.py:237

"http://127.0.0.1:3000",

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/fpd_mcp/proxy/server.py:239

"http://127.0.0.1:8080"

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.secrets.baseline

.secrets.baseline

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338

src/fpd_mcp/shared/cache.py:125

return hashlib.md5(key_string.encode()).hexdigest()

LOWInformation disclosure · disclose.log_secret · CWE-209, CWE-532

tests/test_unified_key_management.py:202

print(f"   API key: {format_key_display(client.api_key)}")

LOWInformation disclosure · disclose.log_secret · CWE-209, CWE-532

tests/test_unified_key_management.py:220

print(f"   API key: {format_key_display(client.api_key)}")

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/fpd_mcp/shared/internal_auth.py:102

token_json = base64.b64decode(token.encode('utf-8')).decode('utf-8')

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/fpd_mcp/shared/internal_auth.py:154

token_json = base64.b64decode(token.encode('utf-8')).decode('utf-8')