Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.cyanheads/treasury-fiscaldata-mcp-server

NPM · @CYANHEADS/TREASURY-FISCALDATA-MCP-SERVER · 2 COMPONENTS · SCANNED SEP 20

Query US Treasury national debt, interest rates, exchange rates, and fiscal datasets via MCP.

+38 this week 81 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security99
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 16 of 60 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability63
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2512 tokens (~358/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
  • Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Install

How do I install the io.github.cyanheads/treasury-fiscaldata-mcp-server server?

io.github.cyanheads/treasury-fiscaldata-mcp-server runs locally as an npm package, launched with npx -y @cyanheads/treasury-fiscaldata-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @cyanheads/treasury-fiscaldata-mcp-server

# add to Claude Code
claude mcp add cyanheads-treasury-fiscaldata-mcp-server -- npx -y @cyanheads/treasury-fiscaldata-mcp-server
// .cursor/mcp.json
{
  "mcpServers": {
    "cyanheads-treasury-fiscaldata-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/treasury-fiscaldata-mcp-server"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "cyanheads-treasury-fiscaldata-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/treasury-fiscaldata-mcp-server"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add cyanheads-treasury-fiscaldata-mcp-server -- npx -y @cyanheads/treasury-fiscaldata-mcp-server
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cyanheads-treasury-fiscaldata-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@cyanheads/treasury-fiscaldata-mcp-server"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add cyanheads-treasury-fiscaldata-mcp-server --command npx --arg -y --arg @cyanheads/treasury-fiscaldata-mcp-server
# ~/.hermes/config.yaml
mcp_servers:
  cyanheads-treasury-fiscaldata-mcp-server:
    command: "npx"
    args: ["-y", "@cyanheads/treasury-fiscaldata-mcp-server"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "cyanheads-treasury-fiscaldata-mcp-server": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@cyanheads/treasury-fiscaldata-mcp-server"
      ]
    }
  }
}
# add to Vellum
assistant mcp add cyanheads-treasury-fiscaldata-mcp-server -t stdio -c npx -a -y @cyanheads/treasury-fiscaldata-mcp-server
// mcp.json
{
  "mcpServers": {
    "cyanheads-treasury-fiscaldata-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/treasury-fiscaldata-mcp-server"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 −2
    • Tool safety: pass → unverified security
    • Stability: pass → unverified security
    • Capabilities: pass → unverified functional
    • Tool coverage: 100 → unverified functional
    • Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
    • Stability: pass → 0.87 functional
    • Package version: 0.1.10 → 0.1.11 functional
  • 19 Sept 26 +1
    • Stability: 0.97 → pass security
  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 +37
    • Injection markers: unverified → pass security
    • Tool coverage: unverified → 100 functional
    • Stability: fail → 0.83 functional
  • 8 Sept 26 −37
    • Tool safety: pass → unverified security
    • Stability: 0.83 → fail security
    • Tool coverage: 100 → unverified functional
  • 6 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.

  • 4 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/@cyanheads/treasury-fiscaldata-mcp-server@0.1.11

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 60 packages
Packages resolved 60
Stale 16
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 7 exposed · ~2,322 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
treasury_dataframe_describe ~115

List DataCanvas dataframes materialized by treasury_query_dataset, treasury_get_debt, treasury_get_interest_rates, and treasury_get_exchange_rates. Each entry surfaces source tool, query parameters, creation/expiry timestamps, row count, and column schema. Use this tool before treasury_dataframe_query to discover table names and column types. Requires CANVAS_PROVIDER_TYPE=duckdb.

NameTypeReqDescription
namestringOptional dataframe table name (df_XXXXX_XXXXX) to describe a single dataframe. Omit to list all active dataframes.
NameTypeReqDescription
dataframesarrayActive dataframes for this tenant, newest first. Empty when none are registered.
errorobjectPresent when the call failed. Absent on success.

No examples provided.

treasury_dataframe_query ~350

Run a single-statement SELECT against DataCanvas dataframes registered by treasury_query_dataset, treasury_get_debt, treasury_get_interest_rates, and treasury_get_exchange_rates. Read-only: writes, DDL, DROP, COPY, PRAGMA, ATTACH, and external-file table functions are rejected. System catalogs (information_schema, pg_catalog, sqlite_master, duckdb_*) are denied at the bridge layer. All Treasury dataframe columns are VARCHAR — CAST to DECIMAL or DATE for arithmetic and date comparisons. Use treasury_dataframe_describe to list available table names and column schemas before querying.

NameTypeReqDescription
previewintegerRows in the immediate response. Defaults to row_limit and may not exceed it. Set lower when using register_as.
register_asstringPersist the result as a new dataframe under this exact name, to chain analyses. The name is used verbatim — any name works, and a df_ prefix keeps it consistent with the tables the data tools mint. E…
row_limitintegerHard cap on rows the query may produce. Default 1000, max 10000. A query matching more rows than this stops at the cap and row_count_capped comes back true — raise it, or use register_as to materiali…
sqlstringyesSingle-statement SELECT against df_<id> tables. All values in Treasury dataframes are VARCHAR (strings) per the API contract — CAST to DECIMAL or DATE for arithmetic and date comparisons. Example: SE…
NameTypeReqDescription
capnumberThe row cap that was applied — preview when supplied, otherwise row_limit.
columnsarrayColumn names in projection order.
errorobjectPresent when the call failed. Absent on success.
expires_atstringISO 8601 expiry timestamp for the newly registered dataframe, when applicable.
noticestringGuidance when the query returned no rows, or when results were capped by preview or row_limit.
registered_asstringSet when register_as was supplied and the new dataframe was materialized.
row_countnumberRows the query produced, up to row_limit. Exceeds rows.length when preview returned fewer. Read with row_count_capped: when that is true this number is row_limit itself, and the size of the full resu…
row_count_cappedbooleanTrue when the query matched more rows than row_limit, so row_count is that cap rather than a total. False means row_count is exact — including when it happens to equal row_limit.
rowsarrayMaterialized rows, bounded by preview / row_limit.
shownnumberNumber of rows returned in this response.
truncatedbooleanTrue when the returned rows were capped below the full result set.

No examples provided.

treasury_get_debt ~382

Fetch national debt (Debt to the Penny) — total public debt outstanding broken into publicly-held debt and intragovernmental holdings. Three modes: "latest" returns the most recent business day's record; "date" returns the record for a specific date (must be a business day — the API only records debt on days markets are open); "series" returns a date range, staging the full result as a DataCanvas table when canvas_id is set or the range matches more than 500 rows — read the table's column schema with treasury_dataframe_describe, then run SQL over it with treasury_dataframe_query. Records go back to 1993-04-01.

NameTypeReqDescription
canvas_idstringSet any non-empty value to stage mode=series results as a DataCanvas table for SQL analysis — the value only requests staging; the server picks the table name. Staging also happens on its own when th…
datestringISO 8601 date (YYYY-MM-DD) for mode=date. Must be a business day; the API only records debt on days the market is open.
end_datestringISO 8601 end date for mode=series (inclusive). Defaults to today.
modestring"latest" returns the most recent day's record. "date" returns the record for a specific date. "series" returns a date range — use with start_date and end_date.
start_datestringISO 8601 start date for mode=series (inclusive). Fiscal Data has daily debt records back to 1993-04-01.
NameTypeReqDescription
canvas_expires_atstringISO 8601 expiry for the canvas dataframe.
canvas_idstringDuckDB table name (df_XXXXX_XXXXX) holding the full retrieved series. Pass it to treasury_dataframe_describe for the column schema, then use it as the FROM target in treasury_dataframe_query SQL. Abs…
capnumberThe preview cap applied to the inline series array.
debt_held_publicstringDebt held by the public (external creditors, Fed, foreign governments) in USD.
errorobjectPresent when the call failed. Absent on success.
intragovernmental_holdingsstringIntragovernmental holdings (debt owed to federal trust funds, Social Security, etc.) in USD.
noticestringGuidance when the inline series is a preview, when the series was staged as a DataCanvas table, or when paging stopped before the full matched set.
record_datestringDate of this debt record (YYYY-MM-DD). For series mode, the most recent date.
retrieved_recordsnumberRecords actually fetched for mode=series across every page, and the row count of the canvas table when one was registered. Never larger than total_records.
seriesarrayInline preview of the mode=series records — at most 20 rows, newest first. Compare series.length against retrieved_records to detect the cap; the full retrieved set is reachable through canvas_id whe…
shownnumberSeries rows returned inline.
total_debtstringTotal public debt outstanding in USD, as a plain decimal string — no separators, no currency symbol, two decimal places. Convert as needed.
total_recordsnumberRecords matching the date range upstream. Exceeds retrieved_records when the match is larger than the series row bound.
truncatedbooleanTrue when the inline series array holds fewer rows than were retrieved.

No examples provided.

treasury_get_exchange_rates ~420

Official Treasury reporting exchange rates for ~165 countries — the rates US federal agencies are required to use when converting foreign currency to USD for official reporting. Published quarterly (March 31, June 30, Sep 30, Dec 31); mode "latest" returns the most recently published quarter. Rate is expressed as foreign currency units per 1 USD (e.g., a Japan-Yen rate of 159.41 means 1 USD = 159.41 JPY). These are NOT market exchange rates and are not suitable for financial transaction pricing. Mode "series" stages the result as a DataCanvas table when canvas_id is set or the range matches more than 500 rows — read the table's column schema with treasury_dataframe_describe, then run SQL over it with treasury_dataframe_query.

NameTypeReqDescription
canvas_idstringSet any non-empty value to stage mode=series results as a DataCanvas table for SQL analysis — the value only requests staging; the server picks the table name. Staging also happens on its own when a…
countriesarrayFilter to specific countries by exact country name (e.g., ["Japan", "Germany", "France"]). Case-sensitive, matches the "country" field. Omit for every country in the quarter (~165).
end_datestringISO 8601 end date for mode=series.
modestring"latest" returns the most recently published quarter's rates. "series" returns a date range of quarterly reports.
start_datestringISO 8601 start date for mode=series. Rates are published end-of-quarter (March 31, June 30, Sep 30, Dec 31).
NameTypeReqDescription
as_of_datestringMost recent quarter-end record_date among the returned rows (YYYY-MM-DD). Not necessarily a date every row shares — check mixed_record_dates.
canvas_expires_atstringISO 8601 expiry for the canvas dataframe.
canvas_idstringDuckDB table name (df_XXXXX_XXXXX) holding the staged series. Pass it to treasury_dataframe_describe for the column schema, then use it as the FROM target in treasury_dataframe_query SQL. Absent when…
capnumberThe preview cap applied to the inline rates array.
effective_datestringEffective date of the as_of_date row (YYYY-MM-DD). Every row carries its own effective_date; this one does not describe the rest.
errorobjectPresent when the call failed. Absent on success.
mixed_record_datesbooleanTrue when the retrieved rows were not all published on as_of_date — including rows past the inline preview. Read each row's record_date rather than applying the top-level date to the set.
notestringContextual note reminding that these are official reporting rates, not market rates.
noticestringGuidance when a requested country matched no records, when the inline series is a preview, when the series was staged as a DataCanvas table, or when the returned rows were published in more than one…
ratesarrayExchange rates for the requested countries/quarter, newest first. Whole in mode=latest — a quarter is a bounded set. In mode=series an inline preview of at most 20 rows; compare its length against re…
retrieved_recordsnumberRows actually fetched for mode=series across every page, and the row count of the canvas table when one was registered. Never larger than total_records.
shownnumberRate rows returned inline.
total_recordsnumberIn mode=latest, the number of rows in rates. In mode=series, the full upstream match — larger than rates.length whenever the preview cap applied, and larger than retrieved_records when paging stopped…
truncatedbooleanTrue when the inline rates array holds fewer rows than were retrieved.

No examples provided.

treasury_get_interest_rates ~407

Average interest rates Treasury pays on its outstanding securities by security type. Answers "what is the government's cost of borrowing?" Covers every type Treasury reports — marketable issues, non-marketable series, and the aggregate totals — and which types it reports changes over the years, so omit security_type to see the ones a given period carries. Rates are percentages, not basis points. Updated monthly (end-of-month records). Mode "latest" returns the most recent month's rates for all or one security type; "series" returns a time history, staging the result as a DataCanvas table when canvas_id is set or the range matches more than 200 rows — read the table's column schema with treasury_dataframe_describe, then run SQL over it with treasury_dataframe_query.

NameTypeReqDescription
canvas_idstringSet any non-empty value to stage mode=series results as a DataCanvas table for SQL analysis — the value only requests staging; the server picks the table name. Staging also happens on its own when a…
end_datestringISO 8601 end date for mode=series. Defaults to today.
modestring"latest" returns the most recent month's rates. "series" returns a time range.
security_typestringFilter to one security type, matched exactly against the security_desc field — full case and punctuation, as in "Treasury Inflation-Protected Securities (TIPS)". Omit for every type in the period, wh…
start_datestringISO 8601 start date for mode=series (YYYY-MM-DD, must be end-of-month for meaningful results).
NameTypeReqDescription
as_of_datestringMost recent record date returned (YYYY-MM-DD).
canvas_expires_atstringISO 8601 expiry for the canvas dataframe.
canvas_idstringDuckDB table name (df_XXXXX_XXXXX) holding the staged series. Pass it to treasury_dataframe_describe for the column schema, then use it as the FROM target in treasury_dataframe_query SQL. Absent when…
capnumberThe preview cap applied to the inline series array.
errorobjectPresent when the call failed. Absent on success.
noticestringGuidance when no records match (where the requested security type does have records, or the types the most recent month carries, or the empty date range), when the inline series is a preview, or when…
ratesarrayInterest rate records, newest first. Whole in mode=latest — a month is a bounded set. In mode=series an inline preview of at most 20 rows; compare its length against total_records to detect the cap,…
shownnumberSeries rows returned inline.
total_recordsnumberIn mode=latest, the number of rows in rates. In mode=series, the full upstream match — larger than rates.length whenever the preview cap applied.
truncatedbooleanTrue when the inline series array holds fewer rows than were retrieved.

No examples provided.

treasury_list_datasets ~186

Browse the curated catalog of US Treasury Fiscal Data API endpoints. Returns endpoint paths, field names, descriptions, and update cadence for each dataset. Use this tool before treasury_query_dataset to discover the correct endpoint path and field names — a typo in either causes a 400 error from the API. The catalog is a curated subset of the full API — pass any endpoint path directly to treasury_query_dataset to query datasets not listed here. The catalog covers debt, interest rates, exchange rates, revenue/spending, savings bonds, and securities datasets.

NameTypeReqDescription
categorystringFilter by category. Omit to list all datasets. Options: debt, interest_rates, exchange_rates, revenue_spending, savings_bonds, securities, other.
searchstringKeyword filter against dataset name and description (case-insensitive substring match). Useful for narrowing results when the category is uncertain.
NameTypeReqDescription
datasetsarrayMatching datasets.
errorobjectPresent when the call failed. Absent on success.
totalnumberTotal matching datasets.

No examples provided.

treasury_query_dataset ~462

Query any Treasury Fiscal Data endpoint by path, field list, filters, sort, and page. Call treasury_list_datasets first to get the correct endpoint path and exact field names — a typo in either causes a 400. Filter syntax: each condition is { field, operator, value } where operator is eq/gt/gte/lt/lte/in (e.g., record_date:gte:2024-01-01). Multiple conditions are ANDed together. All response values are strings per the API contract, including numbers and dates; "null" (string) means no value. Supply canvas_id to stage the page result as a DataCanvas table — read its column schema with treasury_dataframe_describe, then run SQL over it with treasury_dataframe_query (requires CANVAS_PROVIDER_TYPE=duckdb on the server).

NameTypeReqDescription
canvas_idstringSet any non-empty value to stage this page as a DataCanvas table for SQL analysis — the value only requests staging; the server picks the table name. The assigned name (df_XXXXX_XXXXX) comes back in…
endpointstringyesEndpoint path returned by treasury_list_datasets (e.g., "/v2/accounting/od/debt_to_penny"). Include the leading slash.
fieldsarrayFields to return. Omit to return all fields. Specify field names exactly as listed by treasury_list_datasets — a typo causes a 400.
filtersarrayFilter conditions (ANDed together). Multiple filters on different fields are combined in one filter= parameter.
page_numberintegerPage to fetch (1-indexed). Check total_pages in the response to know if more pages exist.
page_sizeintegerRows per page. Default 100. Raise to 10000 to minimize round trips for small datasets. For large time-series pulls, use canvas_id with treasury_dataframe_query instead.
sortstringSort expression: field name optionally prefixed with "-" for descending (e.g., "-record_date" for newest-first).
NameTypeReqDescription
applied_filtersstringFilter expression sent to the API, for verification.
canvas_expires_atstringISO 8601 expiry for the canvas dataframe.
canvas_idstringDuckDB table name (df_XXXXX_XXXXX) holding this page. Pass it to treasury_dataframe_describe for the column schema, then use it as the FROM target in treasury_dataframe_query SQL. Absent when nothing…
dataarrayRows returned. All values are strings per API contract — including numeric and date fields. Convert in the calling context. Null values appear as the string "null".
endpointstringEndpoint that was queried.
errorobjectPresent when the call failed. Absent on success.
field_labelsobjectHuman-readable label for each returned field.
noticestringGuidance when results are empty, a field typo is suspected, the endpoint was not found in the catalog, or staging was requested.
page_numbernumberCurrent page (1-indexed).
page_sizenumberRows per page.
totalCountnumberTotal rows matching the query across all pages — discloses that this page is a subset.
total_countnumberTotal rows matching the query (across all pages).
total_pagesnumberTotal pages at the current page_size.

No examples provided.

Common questions

What is the io.github.cyanheads/treasury-fiscaldata-mcp-server server?

io.github.cyanheads/treasury-fiscaldata-mcp-server is listed in the public MCP registry as io.github.cyanheads/treasury-fiscaldata-mcp-server. Query US Treasury national debt, interest rates, exchange rates, and fiscal datasets via MCP. This page covers its npm package (@cyanheads/treasury-fiscaldata-mcp-server).

Is the io.github.cyanheads/treasury-fiscaldata-mcp-server server safe to use?

io.github.cyanheads/treasury-fiscaldata-mcp-server scores 81 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.cyanheads/treasury-fiscaldata-mcp-server server expose?

io.github.cyanheads/treasury-fiscaldata-mcp-server exposes 7 tools: treasury_list_datasets, treasury_query_dataset, treasury_get_debt, treasury_get_interest_rates, treasury_get_exchange_rates, and 2 more. Their descriptions and schemas cost roughly 2,322 tokens of context every time the server is loaded.

Is the io.github.cyanheads/treasury-fiscaldata-mcp-server server still maintained?

io.github.cyanheads/treasury-fiscaldata-mcp-server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.cyanheads/treasury-fiscaldata-mcp-server server under?

io.github.cyanheads/treasury-fiscaldata-mcp-server declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.