{"name":"io.github.cyanheads/cdc-health-mcp-server","slug":"cyanheads-cdc-health-mcp-server","title":null,"description":"Search and query CDC public health data — mortality, vaccinations, surveillance, behavioral risk.","url":"https://mcp.market/server/cyanheads-cdc-health-mcp-server","rating":null,"grade":"B","score":84,"certified":false,"status":"active","category":"search","tags":["search"],"presence":{"score":41,"stars":5,"forks":0,"downloads_week":524,"last_push_at":"2026-09-16T12:21:21.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/cyanheads/cdc-health-mcp-server","website":null,"version":"0.8.7","remotes":[{"type":"streamable-http","url":"https://cdc.caseyjhand.com/mcp"}],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@cyanheads/cdc-health-mcp-server","version":"0.8.7","runtimeHint":"node","transport":{"type":"stdio"},"packageArguments":[{"value":"run","type":"positional"},{"value":"start:stdio","type":"positional"}],"environmentVariables":[{"description":"Socrata app token for higher rate limits.","format":"string","name":"CDC_APP_TOKEN"},{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"}]},{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@cyanheads/cdc-health-mcp-server","version":"0.8.7","runtimeHint":"node","transport":{"type":"streamable-http","url":"http://localhost:3010/mcp"},"packageArguments":[{"value":"run","type":"positional"},{"value":"start:http","type":"positional"}],"environmentVariables":[{"description":"Socrata app token for higher rate limits.","format":"string","name":"CDC_APP_TOKEN"},{"description":"The hostname for the HTTP server.","format":"string","default":"127.0.0.1","name":"MCP_HTTP_HOST"},{"description":"The port to run the HTTP server on.","format":"string","default":"3010","name":"MCP_HTTP_PORT"},{"description":"The endpoint path for the MCP server.","format":"string","default":"/mcp","name":"MCP_HTTP_ENDPOINT_PATH"},{"description":"Authentication mode to use: 'none', 'jwt', or 'oauth'.","format":"string","default":"none","name":"MCP_AUTH_MODE"},{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"}]}],"tools":[{"name":"cdc_discover_datasets","description":"Search the CDC dataset catalog by keyword, category, or tag. Returns IDs, names, truncated descriptions, asset types, column counts, and update timestamps. The catalog also holds charts, maps, stories, files, and links; an entry whose columnCount is 0 is one of those and yields no data from the other tools. Use cdc_get_dataset_schema for the full column list of a chosen dataset.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"domain":{"default":"data.cdc.gov","description":"CDC Socrata host to search. \"data.cdc.gov\" (default) and \"chronicdata.cdc.gov\" front the same catalog and return the same entries, so switching hosts neither widens nor narrows a search — chronic-disease and small-area collections such as PLACES, the Heart Disease & Stroke Atlas, and Environmental Public Health Tracking are found from either.","type":"string","enum":["data.cdc.gov","chronicdata.cdc.gov"]},"query":{"description":"Full-text search across dataset names and descriptions (e.g., \"diabetes mortality\", \"lead exposure children\").","type":"string"},"category":{"description":"Filter by domain category (e.g., \"NNDSS\", \"Vaccinations\", \"Behavioral Risk Factors\").","type":"string"},"tags":{"description":"Filter by domain tags (e.g., [\"covid19\", \"surveillance\"]). Tags widen the search instead of narrowing it — a dataset matches when it carries any one of them, so every tag added returns more results, and an unrecognized tag matches nothing and leaves the result set unchanged. Values match the catalog's own tag vocabulary, case-insensitively; the tags field on each result shows which values are in use. To narrow, combine tags with query or category, which intersect with the tag set.","type":"array","items":{"type":"string","description":"Tag value"}},"limit":{"default":10,"description":"Results to return (default 10, max 100). offset plus limit must not exceed 10000.","type":"integer","minimum":1,"maximum":100},"offset":{"default":0,"description":"Pagination offset for browsing beyond first page (max 9999). offset plus limit must not exceed 10000; both CDC portals hold well under two thousand entries, so offsets near that ceiling page past the end of the catalog.","type":"integer","minimum":0,"maximum":9999},"order":{"default":"dataset_id","description":"Result ordering. \"dataset_id\" (default) sorts deterministically by each dataset's unique catalog ID — required for stable offset pagination, since consecutive pages form a gap-free, duplicate-free traversal. \"relevance\" returns best-match ranking for keyword search but is not stably paginable across pages, so walking offsets can skip or repeat datasets.","type":"string","enum":["dataset_id","relevance"]}},"$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false}},{"name":"cdc_get_dataset_schema","description":"Fetch the column schema for a CDC dataset — names, data types, descriptions, row count, and last-updated timestamp. Returns the first 100 columns by default; wide datasets continue via column_offset. Get dataset IDs from cdc_discover_datasets.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"domain":{"default":"data.cdc.gov","description":"CDC Socrata host to fetch the dataset from. \"data.cdc.gov\" (default) and \"chronicdata.cdc.gov\" front the same catalog, so a four-by-four ID resolves on either and the default works whichever host the dataset was found on.","type":"string","enum":["data.cdc.gov","chronicdata.cdc.gov"]},"datasetId":{"type":"string","pattern":"^[a-z0-9]{4}-[a-z0-9]{4}$","description":"Four-by-four dataset identifier (e.g., \"bi63-dtpu\"). Obtain from cdc_discover_datasets."},"column_limit":{"default":100,"description":"Columns to return in this call (default 100, max 500). Every dataset under the default arrives whole; past it the response reports totalCount and a nextOffset to pass back as column_offset. Raise this to pull a wide schema in one call.","type":"integer","minimum":1,"maximum":500},"column_offset":{"default":0,"description":"Index of the first column to return, for continuing past a previous call (default 0). Columns keep the order the dataset declares, so column_offset plus column_limit walks the schema without gaps or repeats. An offset at or past the column count returns an empty window rather than an error.","type":"integer","minimum":0,"maximum":10000}},"required":["datasetId"],"$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false}},{"name":"cdc_query_dataset","description":"Execute a SoQL query against any CDC dataset. Supports filtering, aggregation, sorting, full-text search, and field selection. Use cdc_discover_datasets to find dataset IDs and cdc_get_dataset_schema to inspect columns before querying.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"domain":{"default":"data.cdc.gov","description":"CDC Socrata host to query. \"data.cdc.gov\" (default) and \"chronicdata.cdc.gov\" front the same catalog, so a four-by-four ID returns the same rows from either and the default works whichever host the dataset was found on.","type":"string","enum":["data.cdc.gov","chronicdata.cdc.gov"]},"datasetId":{"type":"string","pattern":"^[a-z0-9]{4}-[a-z0-9]{4}$","description":"Four-by-four dataset identifier (e.g., \"bi63-dtpu\"). Obtain from cdc_discover_datasets."},"search":{"description":"Full-text search across all text columns. For precise filtering use the where parameter instead.","type":"string"},"select":{"description":"SoQL SELECT clause — column names, aliases, or aggregates: \"state, sum(deaths) as total_deaths\". Omit for all columns. To enumerate distinct values of a column, set select to \"{column}, count(*) as count\" with group=\"{column}\" and order=\"count DESC\".","type":"string"},"where":{"description":"SoQL WHERE clause. Strings must be single-quoted: \"state='California' AND year=2020\". If a column name matches a SoQL keyword (group, select, where, order, limit, offset, having, search), wrap it in backticks: \"`group`='By Year'\".","type":"string"},"group":{"description":"SoQL GROUP BY clause. Requires aggregate functions in select.","type":"string"},"having":{"description":"SoQL HAVING clause. Filters aggregated results.","type":"string"},"order":{"description":"SoQL ORDER BY clause. Field name with optional ASC/DESC: \"total_deaths DESC\". Set one whenever paging with offset: SODA does not order results implicitly, so consecutive offsets without a deterministic order can skip or repeat rows. When the dataset has no natural unique column, Socrata's documented minimum tie-breaker is the system field `:id`, present on every dataset — order=\":id\".","type":"string"},"limit":{"default":100,"description":"Max rows to return (default 100, max 5000). Fewer come back when the page would cross the 200,000-character response budget; the response says so and gives a nextOffset to resume from.","type":"integer","minimum":1,"maximum":5000},"offset":{"default":0,"description":"Row offset for pagination (max 1,000,000). Pair with a deterministic order clause — an offset walk over unordered results can skip or repeat rows.","type":"integer","minimum":0,"maximum":1000000}},"required":["datasetId"],"$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false}},{"name":"cdc_query_wonder","description":"Query CDC WONDER for national US mortality statistics — deaths, population, and crude/age-adjusted death rates — across its five mortality databases, selected with the database input: final underlying-cause data for 1999–2020 (the default) or 2018–2024, provisional data running from 2018 through the current year, and two multiple-cause databases covering the same two eras. Break results out by year, age group, sex, and/or race, and filter by ICD-10 cause of death, sex, age group, or year range; on a multiple-cause database, mcd_icd10 additionally matches a cause listed anywhere on the death certificate rather than only the one certified as underlying. Each database holds a different span of years (1999–2026 across all of them) and a request whose year_range falls outside the selected one's span is rejected with that span named. WONDER is a separate CDC system from the Socrata datasets the other cdc_* tools query. Data is national only — sub-national (state/county) breakdowns are not available through the API (CDC vital-statistics policy). Cause of death is a filter, not a grouping. Some measure cells come back as a CDC status token rather than a number — \"Suppressed\" (withheld for confidentiality), \"Unreliable\" (a rate from fewer than 20 deaths), or \"Not Applicable\" (no population denominator); those cells read null in rows and each one is listed in cellNotes with its token. CDC also drops whole rows before sending the table — strata with zero deaths, and strata whose death count is suppressed — so a stratum can be missing from rows entirely; messages carries CDC's statement whenever that happened. The whole table comes back by default; a broad grouping can run past a thousand rows, so set limit to take it a page at a time and follow the nextOffset the response reports. Paging shapes the response only — WONDER is asked once either way, and the figures, caveats and hidden-row notices are the same on every page. CDC rejects requests made less than 15 seconds apart across all five databases, so consecutive calls are spaced automatically and a follow-up call may wait about 16 seconds before it runs.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"database":{"default":"underlying_1999_2020","description":"Which WONDER mortality database to query. \"underlying_1999_2020\" (D76) is final data for 1999–2020 and the default. \"provisional\" (D176) runs 2018 through the current year, updated weekly, and returns the most recent years labelled e.g. \"2025 (provisional)\". \"underlying_2018_2024\" (D158) is settled — not provisional — data for 2018–2024. \"multiple_1999_2020\" (D77) and \"multiple_2018_2024\" (D157) record every cause listed on the death certificate; without an mcd_icd10 filter they return the same figures as the underlying-cause database for the same era, so pick one only to use that filter. The two 1999–2020 databases report race in CDC's four bridged groups; the other three use the six single-race groups — figures broken out by race are not comparable between the two families.","type":"string","enum":["underlying_1999_2020","provisional","underlying_2018_2024","multiple_1999_2020","multiple_2018_2024"]},"group_by":{"default":["year"],"description":"Dimensions to break results out by (1–4), in output-column order — e.g. [\"year\"], [\"year\",\"sex\"], [\"age_group\",\"race\"]. Results are always national. Cause of death is a filter (cause_icd10), not a grouping. \"race\" resolves to whichever race vocabulary the selected database uses — four bridged groups (Asian and Pacific Islander combined) on the 1999–2020 databases, six single-race groups plus a multiracial category on the others — so a race series from one family cannot be spliced onto one from the other.","minItems":1,"maxItems":4,"type":"array","items":{"type":"string","enum":["year","age_group","sex","race"]}},"cause_icd10":{"description":"Filter to a specific ICD-10 underlying cause of death — the single condition CDC certified as having started the chain of events leading to death. Omit for all causes. Accepted by every database. \"999--999\" is not an ICD-10 code but CDC's own marker for deaths whose cause it is still withholding under the provisional database's six-month reporting lag; it counts that backlog, and only the \"provisional\" database offers it.","anyOf":[{"type":"string","const":""},{"type":"string","const":"999--999"},{"type":"string","pattern":"^[A-Z][0-9]{2}(\\.[0-9]+)?(-[A-Z][0-9]{2}(\\.[0-9]+)?)?$","description":"ICD-10 underlying-cause code or chapter range. Ranges must match WONDER chapter boundaries exactly (an invalid code is rejected and named in the error) — valid examples: \"A00-B99\" (infectious), \"C00-C97\" (malignant neoplasms), \"I00-I99\" (circulatory), \"J00-J98\" (respiratory), \"V01-Y89\" (external causes), or a single code like \"I21\"."}]},"mcd_icd10":{"description":"Filter to deaths with this ICD-10 code recorded anywhere on the death certificate, whether or not it was the underlying cause — e.g. \"died with a respiratory condition listed\", a population no underlying-cause query can produce. Valid only when database is \"multiple_1999_2020\", \"multiple_2018_2024\", or \"provisional\"; the other databases record only the underlying cause and reject it. \"999--999\", the withheld-cause marker described under cause_icd10, is offered here too but only by \"provisional\". Combines with cause_icd10, which keeps meaning the underlying cause. Omit for all causes.","anyOf":[{"type":"string","const":""},{"type":"string","const":"999--999"},{"type":"string","pattern":"^[A-Z][0-9]{2}(\\.[0-9]+)?(-[A-Z][0-9]{2}(\\.[0-9]+)?)?$","description":"ICD-10 code or chapter range, same form as cause_icd10 — e.g. \"J00-J98\" (respiratory), \"E00-E89\" (endocrine/metabolic), \"S00-T98\" (injury and poisoning, a chapter the underlying-cause finder does not list), or a single code like \"I21\"."}]},"sex":{"default":"all","description":"Filter by sex.","type":"string","enum":["all","male","female"]},"age_groups":{"description":"Restrict to deaths in any of the listed age groups — e.g. [\"25-34\",\"35-44\"] covers both. \"1\" is the under-1-year group. \"NS\" is the group CDC puts a death in when the age was not recorded; it is not covered by any of the ten-year groups, so a filter listing all eleven of those still leaves those deaths out and returns fewer deaths than the same query unfiltered. List \"NS\" alongside them to match an unfiltered total, or on its own to count them. Omit for all ages, which includes them.","type":"array","items":{"type":"string","enum":["1","1-4","5-14","15-24","25-34","35-44","45-54","55-64","65-74","75-84","85+","NS"]}},"year_range":{"description":"Inclusive year range. These bounds span every database (1999–2026); the years the selected one actually holds are narrower, and a range outside them is rejected with that database's span named. Omit for all years the database holds.","type":"object","properties":{"from":{"type":"integer","minimum":1999,"maximum":2026,"description":"First year (1999–2026 across all databases; the selected one holds a narrower span)."},"to":{"type":"integer","minimum":1999,"maximum":2026,"description":"Last year (1999–2026 across all databases; the selected one holds a narrower span)."}},"required":["from","to"]},"limit":{"description":"Rows to return from the table CDC sent (1–5000). Omit to return the whole table. WONDER's request carries no limit of its own, so this pages a table already fetched in full rather than narrowing the query: the deaths, rates, caveats and hidden-row notices are the same whichever page is read. A four-dimension grouping can run past a thousand rows, so set this and follow nextOffset to walk them.","type":"integer","minimum":1,"maximum":5000},"offset":{"default":0,"description":"Index of the first row to return, for continuing past a previous call (default 0, max 10,000). Rows keep the order CDC returned them in, which is stable for a given query, so offset plus limit walks the table without gaps or repeats. An offset at or past the row total returns an empty page rather than an error.","type":"integer","minimum":0,"maximum":10000}},"$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false}}],"scan":{"score":84,"grade":"B","scanned_at":"2026-09-19T10:14:17.106Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T10:14:17.048Z","components":{"code":{"score":25,"max":25,"notes":["35 source files scanned","35 source files scanned"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 395ms"]},"poisoning":{"score":13,"max":15,"notes":["4 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 1 write-action tools with no auth"]},"maintenance":{"score":15,"max":15,"notes":["last push 3 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"},{"id":"poison.long-description","severity":"low","component":"poisoning","title":"Unusually long tool description (over 2,000 characters)","evidence":"tool cdc_query_wonder: …Query CDC WONDER for national US mortality statistics — deaths, population, and crude/age-adjusted death rates — across its five mortality databases, selected with the database input: final underlying-cause data for 1999–2020 (the default) or 2018–2024, provisional data running from 2018 through the current year, and two multiple-cause databases covering the same two eras. Break results out by year, age group, sex, and/or race, and filter by ICD-10 cause of death, sex, age group, or year range; on a multiple-cause database, mcd_icd10 additionally matches a cause listed anywhere on the death certificate rather than only the one certified as underlying. Each database holds a different span of years (1999–2026 across all of them) and a request whose year_range falls outside the selected one's span is rejected with that span named. WONDER is a separate CDC system from the Socrata datasets the other cdc_* tools query. Data is national only — sub-national (state/county) breakdowns are not available through the API (CDC vital-statistics policy). Cause of death is a filter, not a grouping. Some measure cells come back as a CDC status token rather than a number — \"Suppressed\" (withheld for confidentiality), \"Unreliable\" (a rate from fewer than 20 deaths), or \"Not Applicable\" (no population denominator); those cells read null in rows and each one is listed in cellNotes with its token. CDC also drops whole rows before sending the table — strata with zero deaths, and strata whose death count is suppressed — so a stratum can be missing from rows entirely; messages carries CDC's statement whenever that happened. The whole table comes back by default; a broad grouping can run past a thousand rows, so set limit to take it a page at a time and follow the nextOffset the response reports. Paging shapes the response only — WONDER is asked once either way, and the figures, caveats and hidden-row notices are the same on every page. CDC rejects requests made less than 15 seconds apart across all five databases, so consecutive calls are spaced automatically and a follow-up call may wait about 16 seconds before it runs.…"}],"inputs":{"probes":[{"url":"https://cdc.caseyjhand.com/mcp","reachable":true,"authRequired":false,"latencyMs":395,"serverInfo":{"name":"cdc-health-mcp-server","version":"0.8.7"}}],"packages":[{"registryType":"npm","identifier":"@cyanheads/cdc-health-mcp-server","version":"0.8.7","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-09-16T12:22:46.899Z","repositoryUrl":"git+https://github.com/cyanheads/cdc-health-mcp-server.git","weeklyDownloads":262},{"registryType":"npm","identifier":"@cyanheads/cdc-health-mcp-server","version":"0.8.7","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-09-16T12:22:46.899Z","repositoryUrl":"git+https://github.com/cyanheads/cdc-health-mcp-server.git","weeklyDownloads":262}],"repo":{"found":true,"owner":"cyanheads","repo":"cdc-health-mcp-server","archived":false,"pushedAt":"2026-09-16T12:21:21Z","stars":5,"forks":0,"openIssues":3,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/10339515?v=4","ownerCreatedAt":"2014-12-29T13:01:12Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/10339515?v=4&s=128","source":"github"},"presence":{"stars":5,"forks":0,"downloadsWeek":524,"license":"Apache-2.0","lastPushAt":"2026-09-16T12:21:21.000Z","score":41}}}},"grade_history":[],"reviews":[]}