Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.cyanheads/imf-mcp-server

REMOTE · IMF.CASEYJHAND.COM · 2 COMPONENTS · SCANNED SEP 21

Query IMF SDMX 3.0 macroeconomic dataflows — WEO, BOP, CPI, exchange rates, 190 countries.

0 this week 79 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security66
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
Schema Quality & AI Usability61
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2024 tokens (~404/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Install

How do I install the io.github.cyanheads/imf-mcp-server server?

io.github.cyanheads/imf-mcp-server is a hosted endpoint at https://imf.caseyjhand.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · imf.caseyjhand.com

# add to Claude Code
claude mcp add --transport http cyanheads-imf-mcp-server 'https://imf.caseyjhand.com/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "cyanheads-imf-mcp-server": {
      "url": "https://imf.caseyjhand.com/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "cyanheads-imf-mcp-server": {
      "type": "http",
      "url": "https://imf.caseyjhand.com/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.cyanheads-imf-mcp-server]
url = "https://imf.caseyjhand.com/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cyanheads-imf-mcp-server": {
      "type": "remote",
      "url": "https://imf.caseyjhand.com/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add cyanheads-imf-mcp-server --url 'https://imf.caseyjhand.com/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  cyanheads-imf-mcp-server:
    url: "https://imf.caseyjhand.com/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "cyanheads-imf-mcp-server": {
      "Transport": "http",
      "Url": "https://imf.caseyjhand.com/mcp"
    }
  }
}
# add to Vellum
assistant mcp add cyanheads-imf-mcp-server -t streamable-http -u 'https://imf.caseyjhand.com/mcp'
// mcp.json
{
  "mcpServers": {
    "cyanheads-imf-mcp-server": {
      "type": "http",
      "url": "https://imf.caseyjhand.com/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Sept 26 0
    • Server version: 0.4.1 → 0.4.2 functional
  • 9 Sept 26 0
    • Stability: 0.97 → pass security
  • 8 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 7 Sept 26 −1
    • Stability: pass → 0.93 functional
  • 31 Aug 26 −1
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “imf_query_dataset” rewrote its description, which is the text the model reads security
    • Tool “imf_get_database” rewrote its description, which is the text the model reads security
    • Schema quality: 356 → 404 functional
    • Schema quality: 356 → 392 functional
    • Server version: 0.4.0 → 0.4.1 functional
    • Server version: 0.3.1 → 0.4.0 functional
    • Server version: 0.3.0 → 0.3.1 functional
    • Server version: 0.2.12 → 0.3.0 functional
    • “imf_get_database” added an optional parameter “available_only” cosmetic
    • “imf_query_dataset” added an optional parameter “output_mode” cosmetic
    • “imf_get_database” added an optional parameter “dimension_id” cosmetic
    • “imf_get_database” added an optional parameter “limit” cosmetic
    • “imf_get_database” added an optional parameter “offset” cosmetic
    • “imf_dataframe_describe” reworded the description of “canvas_id” cosmetic
    • “imf_query_dataset” reworded the description of “canvas_id” cosmetic
    • “imf_query_dataset” reworded the description of “start_period” cosmetic
    • “imf_dataframe_query” reworded the description of “canvas_id” cosmetic
    • “imf_get_database” reworded the description of “codelist_filter” cosmetic
  • 26 Aug 26 +1
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Aug 26 0
    • Stability: 0.97 → pass security
    • MCP protocol: Implements a current MCP spec version (2026-07-28). functional
    • MCP protocol version: 2025-11-25 → 2026-07-28 functional
    • Server version: 0.2.11 → 0.2.12 functional
  • 24 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Probed https://imf.caseyjhand.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=caseyjhand.com CN=WE1,O=Google Trust Services,C=US 4 Sept 2026 3 Dec 2026 ECDSA 256 ECDSA-SHA256 a6985204ed51ae050e7738aa6be668e9
SANs: caseyjhand.com, *.caseyjhand.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of imf.caseyjhand.com. Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
caseyjhand.com. present 2371 13 Verified
imf.caseyjhand.com. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000; includeSubDomains; preload
x-content-type-options nosniff

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://imf.caseyjhand.com/mcp Verified 200
http (plaintext) http://imf.caseyjhand.com/mcp HTTPS enforced 301 https://imf.caseyjhand.com/mcp
MCP tools · 5 exposed · ~1,882 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
imf_dataframe_describe ~91

List DataCanvas tables and columns staged by a prior imf_query_dataset call. Returns each table's name, row count, and column schema (name + DuckDB type). Required before imf_dataframe_query to discover the table and column names for SQL.

NameTypeReqDescription
canvas_idstringyesCanvas ID returned by imf_query_dataset whenever staged=true, from automatic spillover or output_mode="canvas".
NameTypeReqDescription
canvas_idstringCanvas session ID that was introspected.
errorobjectPresent when the call failed. Absent on success.
table_countnumberTotal number of tables on the canvas.
tablesarrayAll tables registered on this canvas.

No examples provided.

imf_dataframe_query ~181

Run a read-only SQL SELECT against a DataCanvas table staged by imf_query_dataset. Supports multi-country comparisons, time-series aggregation, and cross-indicator joins. Requires imf_dataframe_describe first to discover table and column names. One SELECT statement per call; a leading WITH … SELECT (CTE) is accepted. DML and DDL are rejected.

NameTypeReqDescription
canvas_idstringyesCanvas ID returned by imf_query_dataset whenever staged=true. Call imf_dataframe_describe with it before writing SQL.
sqlstringyesRead-only SQL SELECT statement — exactly one statement, starting with SELECT or with a WITH … SELECT common table expression. Reference tables by the names returned by imf_dataframe_describe. Example…
NameTypeReqDescription
errorobjectPresent when the call failed. Absent on success.
row_countnumberNumber of materialized rows returned in rows. Always equals rows.length and never claims a pre-cap total.
rowsarrayLargest result-row prefix whose complete structured and formatted response fits the 100,000-character response budget, after the canvas row limit (default 10,000) is applied.
truncatedbooleanTrue when DataCanvas capped the query at its row limit or the server omitted materialized rows to fit the response-size budget. Page the remainder with a stable ORDER BY plus LIMIT/OFFSET, or narrow…

No examples provided.

imf_get_database ~521

Fetch a dataflow's dimension list with a codelist preview for each dimension. Resolves human-readable terms to SDMX codes (e.g. "United States" → USA, "Constant prices" → NGDP_RPCH). Required before imf_query_dataset — SDMX keys are opaque without codelist lookups. Each codelist is capped at the first 50 entries by default, including previews filtered by codelist_filter. Set dimension_id to retrieve one codelist with bounded limit/offset paging after the optional substring filter. Set available_only=true to page codes the dataflow actually publishes, with series and time coverage metadata; availability filtering happens before codelist_filter and paging. The imf://database/{dataflow_id} resource provides the same bounded discovery summary. Country codes are ISO 3-letter (USA, GBR, DEU), not ISO 2-letter (US, GB, DE). The key_format field shows the exact dimension order required by imf_query_dataset. Note: codelists enumerate the code universe, not actual coverage — valid codes can still return no_data if the combination has no series in this dataflow.

NameTypeReqDescription
agency_idstringAgency ID that publishes this dataflow, e.g. IMF.RES or IMF.STA. Auto-detected from the dataflow list when omitted.
available_onlybooleanReturn only codes reported by the dataflow-wide availability constraint. Default false keeps ordinary codelist discovery unchanged.
codelist_filterstringOptional case-insensitive substring to search within each dimension's codelist (code ID and name). Filtering runs before the 50-entry preview or selected-dimension page. Example: "CPI" or "Constant p…
dataflow_idstringyesDataflow identifier from imf_list_databases, e.g. WEO, BOP, CPI. Case-sensitive.
dimension_idstringExact dimension ID from this tool, e.g. INDICATOR. Select one dimension to page beyond its preview.
limitintegerEntries to return from the selected dimension. Valid only with dimension_id; default 50, maximum 200.
offsetintegerMatching entries to skip in the selected dimension before this page. Valid only with dimension_id; default 0.
versionstringDataflow version, e.g. 9.0.0. Auto-detected from the dataflow list when omitted.
NameTypeReqDescription
agency_idstringAgency that publishes this dataflow, e.g. IMF.RES, IMF.STA.
available_onlybooleanTrue when dimensions contain published availability coverage rather than codelists.
codelist_filterstringEcho of the codelist_filter that produced this result. Absent when no filter was applied — an empty codelist then means the codelist could not be resolved, not that the filter missed.
dataflow_idstringDataflow identifier, e.g. WEO, BOP, CPI.
descriptionstringThis dataflow's own description in full — not the shared DSD's, and not the shortened preview imf_list_databases returns for the same id. Absent when the dataflow publishes none.
dimension_idstringSelected dimension ID. Absent when previews for every dimension were returned.
dimensionsarrayAll dimension previews, or the one selected dimension page.
dsd_versionstringVersion of the underlying data structure definition (DSD) that backs this dataflow. Differs from version when the dataflow references a shared DSD (e.g. IIP → DSD_BOP at 24.0.0).
errorobjectPresent when the call failed. Absent on success.
key_formatstringDimension names in dot-separated keyPosition order, e.g. COUNTRY.INDICATOR.FREQUENCY. Use this exact format when constructing the key for imf_query_dataset.
namestringHuman-readable dataflow name.
noticestringPopulated when a codelist_filter matched no entries anywhere, or when a dimension has no resolvable codelist, or when offset is past the final match.
series_countnumberTotal series published by the dataflow. Present when available_only is true.
sourcestringAttribution string required by IMF data terms: "Source: International Monetary Fund, <dataflow name>, <link>".
structure_refstringIdentifier of the underlying DSD, e.g. DSD_BOP. Several dataflows can share one DSD.
time_period_endstring|nullLatest period with published data, or null when the constraint omits it.
time_period_startstring|nullEarliest period with published data, or null when the constraint omits it.
truncatedbooleanTrue when any returned dimension page omits matching codes.
versionstringDataflow version string, e.g. 9.0.0.

No examples provided.

imf_list_databases ~279

List IMF SDMX dataflows available on the portal. Entry point for every query: imf_get_database and imf_query_dataset both require a dataflow id obtained here. Vintage (historical snapshot) dataflows such as WEO_2025_OCT_VINTAGE are excluded by default; set include_vintages=true to include them. Results are paged — 50 per call by default, adjustable with limit and offset — and total_count reports how many dataflows matched. Descriptions are shortened here; imf_get_database returns the full text for a single dataflow.

NameTypeReqDescription
filterstringOptional name, ID, or description substring to filter results. Case-insensitive. Example: "exchange rate" returns ER and related dataflows.
include_vintagesbooleanInclude vintage (historical snapshot) dataflows such as WEO_2025_OCT_VINTAGE. Default false — vintages are excluded to keep the discovery surface clean.
limitintegerMaximum dataflows to return in this call. Default 50, ceiling 200; total_count reports how many matched, so a partial page is always recognizable as one.
offsetintegerNumber of matching dataflows to skip before this page. Combine with limit to page through a broad or unfiltered catalog.
NameTypeReqDescription
capnumberThe limit that bounded this page.
dataflowsarrayThis page of matching dataflows; pass the id to imf_get_database to resolve dimension codelists.
errorobjectPresent when the call failed. Absent on success.
noticestringPopulated when the filter matches nothing, or when matches remain beyond this page — explains why and names the next offset to request.
offsetnumberNumber of matching dataflows skipped before this page.
returned_countnumberDataflows in this page — the length of dataflows.
shownnumberDataflows returned in this page.
total_countnumberDataflows matching filter and include_vintages, before limit and offset are applied. Exceeds returned_count when more pages remain.
truncatedbooleanTrue when matching dataflows remain beyond this page.

No examples provided.

imf_query_dataset ~810

Query an IMF SDMX dataflow by dimension key over a time range. Returns observations with time_period, value, and status, plus the unit, scale, and decimals of each series — a key resolving to several series carries one entry per series in series_metadata, since unit and scale differ between them. Requires imf_get_database first to obtain the correct key_format and valid dimension codes. Country codes are ISO 3-letter (USA, GBR, DEU — not US, GB, DE). Key format: dot-separated codes in DSD keyPosition order (e.g. USA.NGDP_RPCH.A for WEO). Every position must carry a code: use + to combine codes (e.g. USA+GBR.NGDP_RPCH.A) and * to match every code at a position (e.g. *.NGDP_RPCH.A for all countries). Codelists from imf_get_database enumerate the code universe, not actual coverage — valid codes can still return no_data if the combination has no series. start_period and end_period must be valid period strings (YYYY, YYYY-SN, YYYY-QN, YYYY-MM, or a calendar-valid YYYY-MM-DD) with start_period no later than end_period; malformed or reversed ranges are rejected. A bound covers the whole period it names, so end_period 2023 includes 2023-M12 and 2023-Q4. Large analytical result sets (multi-country, long time range) spill to DataCanvas; call imf_dataframe_describe first to inspect staged tables and columns, then imf_dataframe_query for SQL analysis.

NameTypeReqDescription
agency_idstringAgency ID, e.g. IMF.RES or IMF.STA. Auto-detected from dataflow list when omitted.
canvas_idstringExisting canvas ID to accumulate results into across multiple queries. This selects the destination only; it does not force staging. Use output_mode="canvas" to stage an under-budget result.
dataflow_idstringyesDataflow identifier from imf_list_databases, e.g. WEO, BOP, CPI.
end_periodstringEnd of time range (inclusive). Same formats as start_period, and must not be earlier than it. The bound covers the whole period it names, so end_period 2023 admits 2023-M12 and 2023-Q4. Observations…
keystringyesDot-separated dimension codes in DSD keyPosition order. Call imf_get_database to get key_format and valid codes first. Use + to combine codes at one position (e.g. USA+GBR.NGDP_RPCH.A). Use * to matc…
output_modestringResult placement. auto returns an under-budget result inline and spills only when needed. canvas explicitly stages the full result, using canvas_id when supplied or allocating a fresh canvas.
start_periodstringStart of time range (inclusive). Accepts any of YYYY (annual), YYYY-SN (semi-annual, e.g. 2023-S1), YYYY-QN (quarterly, e.g. 2023-Q1), YYYY-MM (monthly), or a calendar-valid YYYY-MM-DD (daily), whate…
versionstringDataflow version. Auto-detected from dataflow list when omitted.
NameTypeReqDescription
canvas_idstringDataCanvas session ID — present when staged=true. Pass first to imf_dataframe_describe, then to imf_dataframe_query.
dataflow_idstringDataflow identifier that was queried, e.g. WEO.
end_periodstringLatest period covered; absent when the full available range was used.
errorobjectPresent when the call failed. Absent on success.
keystringDimension key used in the query, e.g. USA.NGDP_RPCH.A.
noticestringPopulated when a period bound was set but some observations carry a time_period label the range filter does not recognize. Composes with staged retrieval_guidance when both apply.
observation_countnumberTotal observations in the result.
observationsarrayInline observation preview. For staged results this may contain the full set or a budget-limited prefix; observation_count remains the full count.
retrieval_guidancestringPresent on every staged result. Identifies the imf_dataframe_describe-before-imf_dataframe_query retrieval workflow.
series_attributesobjectAttributes of the first series in the result — the same series as series_metadata[0]. A key with + or * resolves to several series whose scale and unit differ, and this field describes only the first…
series_metadataarrayPer-series attributes, one entry per distinct series_key in the result. Present only when the query resolved to more than one series; a single-series query carries its values in series_attributes ins…
sourcestringAttribution string required by IMF data terms: "Source: International Monetary Fund, <dataflow name>, <link>".
stagedbooleanTrue when the complete observation set is stored on DataCanvas. canvas_id and table_name are present whenever true.
start_periodstringEarliest period covered; absent when the full available range was used.
table_namestringDuckDB table name on the canvas — present when staged=true; reference in SQL via FROM <table_name>.
truncatedbooleanTrue only when observations is an incomplete preview of observation_count. A result can be staged=true and truncated=false when every observation also fits inline.

No examples provided.

Common questions

What is the io.github.cyanheads/imf-mcp-server server?

io.github.cyanheads/imf-mcp-server is listed in the public MCP registry as io.github.cyanheads/imf-mcp-server. Query IMF SDMX 3.0 macroeconomic dataflows, WEO, BOP, CPI, exchange rates, 190 countries. This page covers its hosted endpoint (https://imf.caseyjhand.com/mcp).

Is the io.github.cyanheads/imf-mcp-server server safe to use?

io.github.cyanheads/imf-mcp-server scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.cyanheads/imf-mcp-server server expose?

io.github.cyanheads/imf-mcp-server exposes 5 tools: imf_list_databases, imf_get_database, imf_query_dataset, imf_dataframe_describe, imf_dataframe_query. Their descriptions and schemas cost roughly 1,882 tokens of context every time the server is loaded.

Does the io.github.cyanheads/imf-mcp-server server require authentication?

No. We connected to io.github.cyanheads/imf-mcp-server without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.github.cyanheads/imf-mcp-server server still maintained?

io.github.cyanheads/imf-mcp-server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.