io.github.cyanheads/imf-mcp-server
REMOTE · IMF.CASEYJHAND.COM · 2 COMPONENTS · SCANNED SEP 21
Query IMF SDMX 3.0 macroeconomic dataflows — WEO, BOP, CPI, exchange rates, 190 countries.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security66
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability61
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2024 tokens (~404/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the io.github.cyanheads/imf-mcp-server server?
io.github.cyanheads/imf-mcp-server is a hosted endpoint at https://imf.caseyjhand.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · imf.caseyjhand.com
claude mcp add --transport http cyanheads-imf-mcp-server 'https://imf.caseyjhand.com/mcp'
{
"mcpServers": {
"cyanheads-imf-mcp-server": {
"url": "https://imf.caseyjhand.com/mcp"
}
}
} {
"servers": {
"cyanheads-imf-mcp-server": {
"type": "http",
"url": "https://imf.caseyjhand.com/mcp"
}
}
} [mcp_servers.cyanheads-imf-mcp-server] url = "https://imf.caseyjhand.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"cyanheads-imf-mcp-server": {
"type": "remote",
"url": "https://imf.caseyjhand.com/mcp",
"enabled": true
}
}
} openclaw mcp add cyanheads-imf-mcp-server --url 'https://imf.caseyjhand.com/mcp' --transport streamable-http
mcp_servers:
cyanheads-imf-mcp-server:
url: "https://imf.caseyjhand.com/mcp" {
"McpServers": {
"cyanheads-imf-mcp-server": {
"Transport": "http",
"Url": "https://imf.caseyjhand.com/mcp"
}
}
} assistant mcp add cyanheads-imf-mcp-server -t streamable-http -u 'https://imf.caseyjhand.com/mcp'
{
"mcpServers": {
"cyanheads-imf-mcp-server": {
"type": "http",
"url": "https://imf.caseyjhand.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 0
- Server version: 0.4.1 → 0.4.2 functional
- 9 Sept 26 0
- Stability: 0.97 → pass security
- 8 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Sept 26 −1
- Stability: pass → 0.93 functional
- 31 Aug 26 −1
- The server rewrote its instructions, which are the text every model session reads security
- Tool “imf_query_dataset” rewrote its description, which is the text the model reads security
- Tool “imf_get_database” rewrote its description, which is the text the model reads security
- Schema quality: 356 → 404 ▼ functional
- Schema quality: 356 → 392 ▼ functional
- Server version: 0.4.0 → 0.4.1 functional
- Server version: 0.3.1 → 0.4.0 functional
- Server version: 0.3.0 → 0.3.1 functional
- Server version: 0.2.12 → 0.3.0 functional
- “imf_get_database” added an optional parameter “available_only” cosmetic
- “imf_query_dataset” added an optional parameter “output_mode” cosmetic
- “imf_get_database” added an optional parameter “dimension_id” cosmetic
- “imf_get_database” added an optional parameter “limit” cosmetic
- “imf_get_database” added an optional parameter “offset” cosmetic
- “imf_dataframe_describe” reworded the description of “canvas_id” cosmetic
- “imf_query_dataset” reworded the description of “canvas_id” cosmetic
- “imf_query_dataset” reworded the description of “start_period” cosmetic
- “imf_dataframe_query” reworded the description of “canvas_id” cosmetic
- “imf_get_database” reworded the description of “codelist_filter” cosmetic
- 26 Aug 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 0
- Stability: 0.97 → pass security
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- MCP protocol version: 2025-11-25 → 2026-07-28 functional
- Server version: 0.2.11 → 0.2.12 functional
- 24 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://imf.caseyjhand.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=caseyjhand.com | CN=WE1,O=Google Trust Services,C=US | 4 Sept 2026 | 3 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | a6985204ed51ae050e7738aa6be668e9 |
| SANs: caseyjhand.com, *.caseyjhand.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of imf.caseyjhand.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| caseyjhand.com. | present | 2371 | 13 | Verified |
| imf.caseyjhand.com. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains; preload |
| x-content-type-options | nosniff |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://imf.caseyjhand.com/mcp | Verified | 200 | |
| http (plaintext) | http://imf.caseyjhand.com/mcp | HTTPS enforced | 301 | https://imf.caseyjhand.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
imf_dataframe_describe Imf Dataframe Describe ~91
List DataCanvas tables and columns staged by a prior imf_query_dataset call. Returns each table's name, row count, and column schema (name + DuckDB type). Required before imf_dataframe_query to discover the table and column names for SQL.
| Name | Type | Req | Description |
|---|---|---|---|
| canvas_id | string | yes | Canvas ID returned by imf_query_dataset whenever staged=true, from automatic spillover or output_mode="canvas". |
| Name | Type | Req | Description |
|---|---|---|---|
| canvas_id | string | – | Canvas session ID that was introspected. |
| error | object | – | Present when the call failed. Absent on success. |
| table_count | number | – | Total number of tables on the canvas. |
| tables | array | – | All tables registered on this canvas. |
No examples provided.
imf_dataframe_query Imf Dataframe Query ~181
Run a read-only SQL SELECT against a DataCanvas table staged by imf_query_dataset. Supports multi-country comparisons, time-series aggregation, and cross-indicator joins. Requires imf_dataframe_describe first to discover table and column names. One SELECT statement per call; a leading WITH … SELECT (CTE) is accepted. DML and DDL are rejected.
| Name | Type | Req | Description |
|---|---|---|---|
| canvas_id | string | yes | Canvas ID returned by imf_query_dataset whenever staged=true. Call imf_dataframe_describe with it before writing SQL. |
| sql | string | yes | Read-only SQL SELECT statement — exactly one statement, starting with SELECT or with a WITH … SELECT common table expression. Reference tables by the names returned by imf_dataframe_describe. Example… |
| Name | Type | Req | Description |
|---|---|---|---|
| error | object | – | Present when the call failed. Absent on success. |
| row_count | number | – | Number of materialized rows returned in rows. Always equals rows.length and never claims a pre-cap total. |
| rows | array | – | Largest result-row prefix whose complete structured and formatted response fits the 100,000-character response budget, after the canvas row limit (default 10,000) is applied. |
| truncated | boolean | – | True when DataCanvas capped the query at its row limit or the server omitted materialized rows to fit the response-size budget. Page the remainder with a stable ORDER BY plus LIMIT/OFFSET, or narrow… |
No examples provided.
imf_get_database Imf Get Database ~521
Fetch a dataflow's dimension list with a codelist preview for each dimension. Resolves human-readable terms to SDMX codes (e.g. "United States" → USA, "Constant prices" → NGDP_RPCH). Required before imf_query_dataset — SDMX keys are opaque without codelist lookups. Each codelist is capped at the first 50 entries by default, including previews filtered by codelist_filter. Set dimension_id to retrieve one codelist with bounded limit/offset paging after the optional substring filter. Set available_only=true to page codes the dataflow actually publishes, with series and time coverage metadata; availability filtering happens before codelist_filter and paging. The imf://database/{dataflow_id} resource provides the same bounded discovery summary. Country codes are ISO 3-letter (USA, GBR, DEU), not ISO 2-letter (US, GB, DE). The key_format field shows the exact dimension order required by imf_query_dataset. Note: codelists enumerate the code universe, not actual coverage — valid codes can still return no_data if the combination has no series in this dataflow.
| Name | Type | Req | Description |
|---|---|---|---|
| agency_id | string | – | Agency ID that publishes this dataflow, e.g. IMF.RES or IMF.STA. Auto-detected from the dataflow list when omitted. |
| available_only | boolean | – | Return only codes reported by the dataflow-wide availability constraint. Default false keeps ordinary codelist discovery unchanged. |
| codelist_filter | string | – | Optional case-insensitive substring to search within each dimension's codelist (code ID and name). Filtering runs before the 50-entry preview or selected-dimension page. Example: "CPI" or "Constant p… |
| dataflow_id | string | yes | Dataflow identifier from imf_list_databases, e.g. WEO, BOP, CPI. Case-sensitive. |
| dimension_id | string | – | Exact dimension ID from this tool, e.g. INDICATOR. Select one dimension to page beyond its preview. |
| limit | integer | – | Entries to return from the selected dimension. Valid only with dimension_id; default 50, maximum 200. |
| offset | integer | – | Matching entries to skip in the selected dimension before this page. Valid only with dimension_id; default 0. |
| version | string | – | Dataflow version, e.g. 9.0.0. Auto-detected from the dataflow list when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| agency_id | string | – | Agency that publishes this dataflow, e.g. IMF.RES, IMF.STA. |
| available_only | boolean | – | True when dimensions contain published availability coverage rather than codelists. |
| codelist_filter | string | – | Echo of the codelist_filter that produced this result. Absent when no filter was applied — an empty codelist then means the codelist could not be resolved, not that the filter missed. |
| dataflow_id | string | – | Dataflow identifier, e.g. WEO, BOP, CPI. |
| description | string | – | This dataflow's own description in full — not the shared DSD's, and not the shortened preview imf_list_databases returns for the same id. Absent when the dataflow publishes none. |
| dimension_id | string | – | Selected dimension ID. Absent when previews for every dimension were returned. |
| dimensions | array | – | All dimension previews, or the one selected dimension page. |
| dsd_version | string | – | Version of the underlying data structure definition (DSD) that backs this dataflow. Differs from version when the dataflow references a shared DSD (e.g. IIP → DSD_BOP at 24.0.0). |
| error | object | – | Present when the call failed. Absent on success. |
| key_format | string | – | Dimension names in dot-separated keyPosition order, e.g. COUNTRY.INDICATOR.FREQUENCY. Use this exact format when constructing the key for imf_query_dataset. |
| name | string | – | Human-readable dataflow name. |
| notice | string | – | Populated when a codelist_filter matched no entries anywhere, or when a dimension has no resolvable codelist, or when offset is past the final match. |
| series_count | number | – | Total series published by the dataflow. Present when available_only is true. |
| source | string | – | Attribution string required by IMF data terms: "Source: International Monetary Fund, <dataflow name>, <link>". |
| structure_ref | string | – | Identifier of the underlying DSD, e.g. DSD_BOP. Several dataflows can share one DSD. |
| time_period_end | string|null | – | Latest period with published data, or null when the constraint omits it. |
| time_period_start | string|null | – | Earliest period with published data, or null when the constraint omits it. |
| truncated | boolean | – | True when any returned dimension page omits matching codes. |
| version | string | – | Dataflow version string, e.g. 9.0.0. |
No examples provided.
imf_list_databases Imf List Databases ~279
List IMF SDMX dataflows available on the portal. Entry point for every query: imf_get_database and imf_query_dataset both require a dataflow id obtained here. Vintage (historical snapshot) dataflows such as WEO_2025_OCT_VINTAGE are excluded by default; set include_vintages=true to include them. Results are paged — 50 per call by default, adjustable with limit and offset — and total_count reports how many dataflows matched. Descriptions are shortened here; imf_get_database returns the full text for a single dataflow.
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | Optional name, ID, or description substring to filter results. Case-insensitive. Example: "exchange rate" returns ER and related dataflows. |
| include_vintages | boolean | – | Include vintage (historical snapshot) dataflows such as WEO_2025_OCT_VINTAGE. Default false — vintages are excluded to keep the discovery surface clean. |
| limit | integer | – | Maximum dataflows to return in this call. Default 50, ceiling 200; total_count reports how many matched, so a partial page is always recognizable as one. |
| offset | integer | – | Number of matching dataflows to skip before this page. Combine with limit to page through a broad or unfiltered catalog. |
| Name | Type | Req | Description |
|---|---|---|---|
| cap | number | – | The limit that bounded this page. |
| dataflows | array | – | This page of matching dataflows; pass the id to imf_get_database to resolve dimension codelists. |
| error | object | – | Present when the call failed. Absent on success. |
| notice | string | – | Populated when the filter matches nothing, or when matches remain beyond this page — explains why and names the next offset to request. |
| offset | number | – | Number of matching dataflows skipped before this page. |
| returned_count | number | – | Dataflows in this page — the length of dataflows. |
| shown | number | – | Dataflows returned in this page. |
| total_count | number | – | Dataflows matching filter and include_vintages, before limit and offset are applied. Exceeds returned_count when more pages remain. |
| truncated | boolean | – | True when matching dataflows remain beyond this page. |
No examples provided.
imf_query_dataset Imf Query Dataset ~810
Query an IMF SDMX dataflow by dimension key over a time range. Returns observations with time_period, value, and status, plus the unit, scale, and decimals of each series — a key resolving to several series carries one entry per series in series_metadata, since unit and scale differ between them. Requires imf_get_database first to obtain the correct key_format and valid dimension codes. Country codes are ISO 3-letter (USA, GBR, DEU — not US, GB, DE). Key format: dot-separated codes in DSD keyPosition order (e.g. USA.NGDP_RPCH.A for WEO). Every position must carry a code: use + to combine codes (e.g. USA+GBR.NGDP_RPCH.A) and * to match every code at a position (e.g. *.NGDP_RPCH.A for all countries). Codelists from imf_get_database enumerate the code universe, not actual coverage — valid codes can still return no_data if the combination has no series. start_period and end_period must be valid period strings (YYYY, YYYY-SN, YYYY-QN, YYYY-MM, or a calendar-valid YYYY-MM-DD) with start_period no later than end_period; malformed or reversed ranges are rejected. A bound covers the whole period it names, so end_period 2023 includes 2023-M12 and 2023-Q4. Large analytical result sets (multi-country, long time range) spill to DataCanvas; call imf_dataframe_describe first to inspect staged tables and columns, then imf_dataframe_query for SQL analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| agency_id | string | – | Agency ID, e.g. IMF.RES or IMF.STA. Auto-detected from dataflow list when omitted. |
| canvas_id | string | – | Existing canvas ID to accumulate results into across multiple queries. This selects the destination only; it does not force staging. Use output_mode="canvas" to stage an under-budget result. |
| dataflow_id | string | yes | Dataflow identifier from imf_list_databases, e.g. WEO, BOP, CPI. |
| end_period | string | – | End of time range (inclusive). Same formats as start_period, and must not be earlier than it. The bound covers the whole period it names, so end_period 2023 admits 2023-M12 and 2023-Q4. Observations… |
| key | string | yes | Dot-separated dimension codes in DSD keyPosition order. Call imf_get_database to get key_format and valid codes first. Use + to combine codes at one position (e.g. USA+GBR.NGDP_RPCH.A). Use * to matc… |
| output_mode | string | – | Result placement. auto returns an under-budget result inline and spills only when needed. canvas explicitly stages the full result, using canvas_id when supplied or allocating a fresh canvas. |
| start_period | string | – | Start of time range (inclusive). Accepts any of YYYY (annual), YYYY-SN (semi-annual, e.g. 2023-S1), YYYY-QN (quarterly, e.g. 2023-Q1), YYYY-MM (monthly), or a calendar-valid YYYY-MM-DD (daily), whate… |
| version | string | – | Dataflow version. Auto-detected from dataflow list when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| canvas_id | string | – | DataCanvas session ID — present when staged=true. Pass first to imf_dataframe_describe, then to imf_dataframe_query. |
| dataflow_id | string | – | Dataflow identifier that was queried, e.g. WEO. |
| end_period | string | – | Latest period covered; absent when the full available range was used. |
| error | object | – | Present when the call failed. Absent on success. |
| key | string | – | Dimension key used in the query, e.g. USA.NGDP_RPCH.A. |
| notice | string | – | Populated when a period bound was set but some observations carry a time_period label the range filter does not recognize. Composes with staged retrieval_guidance when both apply. |
| observation_count | number | – | Total observations in the result. |
| observations | array | – | Inline observation preview. For staged results this may contain the full set or a budget-limited prefix; observation_count remains the full count. |
| retrieval_guidance | string | – | Present on every staged result. Identifies the imf_dataframe_describe-before-imf_dataframe_query retrieval workflow. |
| series_attributes | object | – | Attributes of the first series in the result — the same series as series_metadata[0]. A key with + or * resolves to several series whose scale and unit differ, and this field describes only the first… |
| series_metadata | array | – | Per-series attributes, one entry per distinct series_key in the result. Present only when the query resolved to more than one series; a single-series query carries its values in series_attributes ins… |
| source | string | – | Attribution string required by IMF data terms: "Source: International Monetary Fund, <dataflow name>, <link>". |
| staged | boolean | – | True when the complete observation set is stored on DataCanvas. canvas_id and table_name are present whenever true. |
| start_period | string | – | Earliest period covered; absent when the full available range was used. |
| table_name | string | – | DuckDB table name on the canvas — present when staged=true; reference in SQL via FROM <table_name>. |
| truncated | boolean | – | True only when observations is an incomplete preview of observation_count. A result can be staged=true and truncated=false when every observation also fits inline. |
No examples provided.
What is the io.github.cyanheads/imf-mcp-server server?
io.github.cyanheads/imf-mcp-server is listed in the public MCP registry as io.github.cyanheads/imf-mcp-server. Query IMF SDMX 3.0 macroeconomic dataflows, WEO, BOP, CPI, exchange rates, 190 countries. This page covers its hosted endpoint (https://imf.caseyjhand.com/mcp).
Is the io.github.cyanheads/imf-mcp-server server safe to use?
io.github.cyanheads/imf-mcp-server scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.cyanheads/imf-mcp-server server expose?
io.github.cyanheads/imf-mcp-server exposes 5 tools: imf_list_databases, imf_get_database, imf_query_dataset, imf_dataframe_describe, imf_dataframe_query. Their descriptions and schemas cost roughly 1,882 tokens of context every time the server is loaded.
Does the io.github.cyanheads/imf-mcp-server server require authentication?
No. We connected to io.github.cyanheads/imf-mcp-server without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.cyanheads/imf-mcp-server server still maintained?
io.github.cyanheads/imf-mcp-server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.