@datanexusmcp/mcp-server

MCPcommunity
v2.4.12UnknownSEE LICENSE IN LICENSEUpdated 6d agonpmGitHub

DataNexus MCP — AI-Ready public data intelligence. 55 tools: CVE risk verdicts, SBOM licence policy, frontend security (manifest audit, CI scanner, typosquatting), licence compatibility, nonprofit 990 trends, SBOM monitoring, federal contracts, NPI lookup

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
343Downloads/wk
6d agoLast update
Package
AuthorUnknown
LicenseSEE LICENSE IN LICENSE
Version2.4.12
Sourcenpm+mcp-registry
npm@datanexusmcp/mcp-server
GitHubdatanexusmcp/mcp-server
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/25
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/10
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
—npm provenance (Sigstore)+0/5
→ Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface—
Security scan✓ Cleanv2.4.9 · 19d ago
EvalsNone
IndexedJun 12, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

DataNexus MCP — AI-Ready public data intelligence. 55 tools: CVE risk verdicts, SBOM licence policy, frontend security (manifest audit, CI scanner, typosquatting), licence compatibility, nonprofit 990 trends, SBOM monitoring, federal contracts, NPI lookup

Keywords
mcpmodel-context-protocolaipublic-dataopen-datanonprofitirseincharityvulnerabilitycvesbomnistosvkevcisaepssexploitlicencelicensespdxlicence-complianceopen-source-compliancesupply-chain-securitytyposquattingmaintainernpifinrahealthcarelicense-verificationdnsrdapdomainsslsubdomainsemail-securityspfdmarcdkimreverse-ippatentepousptogovernment-contractingprocurementusaspendingfederal-registerregulationsfrontend-securityci-pipelinegithub-actionssecret-scanningmanifest-auditsbom-licencelicence-policyapi-keycve-watch