Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.cyanheads/wikidata-mcp-server

REMOTE · WIKIDATA.CASEYJHAND.COM · 2 COMPONENTS

Search and fetch Wikidata entities, execute SPARQL queries, and resolve external identifiers.

0 this week 81 Trust /100

Last scanned (6 hours ago)

Scores higher than 84% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Search and Retrieval

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security66
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
Schema Quality & AI Usability78
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2696 tokens (~245/item across 11 items; 7 tools + 4 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "wikidata_sparql_query" implies "execute" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Fail
  • An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 28 Oct 26 0
    • Tool “wikidata_get_statements” rewrote its description, which is the text the model reads security
    • New resource “wikidata-guide” functional
    • Server version: 0.2.1 → 0.3.0 functional
  • 25 Oct 26 0
    • Server version: 0.2.0 → 0.2.1 functional
  • 13 Oct 26 0
    • Tool “wikidata_get_statements” rewrote its description, which is the text the model reads security
    • Tool “wikidata_sparql_query” rewrote its description, which is the text the model reads security
    • Schema quality: 227 → 263 ▼ functional
    • Server version: 0.1.20 → 0.2.0 functional
    • “wikidata_get_statements” reworded the description of “resolve_labels” cosmetic
    • “wikidata_get_entity” reworded the description of “languages” cosmetic
    • “wikidata_get_labels” reworded the description of “languages” cosmetic
    • “wikidata_get_statements” reworded the description of “language” cosmetic
    • “wikidata_resolve_external_id” reworded the description of “language” cosmetic
    • “wikidata_search_entities” reworded the description of “language” cosmetic
    • “wikidata_sparql_query” reworded the description of “language” cosmetic
    • “wikidata_sparql_query” reworded the description of “query” cosmetic
  • 10 Oct 26 0
    • Server version: 0.1.19 → 0.1.20 functional
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 20 Sept 26 0
    • Server version: 0.1.18 → 0.1.19 functional
  • 9 Sept 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://wikidata.caseyjhand.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=caseyjhand.com CN=WE1,O=Google Trust Services,C=US 2 Nov 2026 31 Jan 2027 ECDSA 256 ECDSA-SHA256 995a30681ab772540e934241ca1d576c
SANs: caseyjhand.com, *.caseyjhand.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of wikidata.caseyjhand.com. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
caseyjhand.com. present 2371 13 Verified
wikidata.caseyjhand.com. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000; includeSubDomains; preload
x-content-type-options nosniff

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://wikidata.caseyjhand.com/mcp Verified 200
http (plaintext) http://wikidata.caseyjhand.com/mcp HTTPS enforced 301 https://wikidata.caseyjhand.com/mcp
MCP tools · 7 exposed · ~2,427 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
wikidata_get_entity ~412

Fetch a Wikidata entity (item or property) by QID or PID. The fields parameter narrows the upstream fetch, not just the response — asking for labels alone costs a fraction of the whole entity, so name the fields you need. Omit fields for all data; a well-connected item is large enough to overflow, and an oversized entity returns kind: "outline" — the field categories with their byte sizes — instead of the data. Follow its retrieval_notice literally rather than picking from sections yourself — it names a fields set already measured to fit, since category sizes are additive and requesting them all would overflow again; for a category too large to deliver whole (statements or sitelinks on a major item) it names the sibling tool that can narrow it. Q-IDs (e.g. Q76) fetch items; P-IDs (e.g. P31) fetch properties from the correct endpoint automatically. Use wikidata_get_statements for deep claim traversal with label resolution, and whenever an entity's statements are large — its properties parameter selects individual P-IDs, granularity fields does not carry.

NameTypeReqDescription
fieldsarray–Fields to include. Options: "labels", "descriptions", "aliases", "statements", "sitelinks". Narrows the upstream fetch as well as the response, so a narrow selection is markedly cheaper. Omit for all…
idstringyesQ-ID (e.g., "Q76") or P-ID (e.g., "P31"). Case-insensitive — normalized to uppercase.
languagesarray–Wikidata language codes to include in labels, descriptions, and aliases (e.g., ["en", "de"]). Case-insensitive; "_" is read as "-"; blank entries are dropped. A requested language with no label of it…
NameTypeReqDescription
aliasesobject–Map of language code to list of alias strings (e.g., {"en": ["Barack H. Obama", "President Obama"]}).
data_typestring–Property data type (e.g., "wikibase-item", "external-id"). Present on properties only.
descriptionsobject–Map of language code to description string (e.g., {"en": "44th President of the United States"}).
errorobject–Present when the call failed. Absent on success.
fieldsReturnedarray–Which fields were requested. In outline mode these are the categories the outline covers, not data returned.
idstring–Normalized entity ID (e.g., "Q76" or "P31").
kindstring–full — the requested field categories carry their data. outline — the entity overflowed the inline byte budget, so sections lists the categories with their byte sizes instead, and retrieval_notice na…
labelsobject–Map of language code to label string (e.g., {"en": "Barack Obama", "de": "Barack Obama"}).
retrieval_noticestring–Present when kind = outline: the next call to make, and the authoritative one to follow. It names a literal fields set already measured to fit the budget, defers any category that would not fit along…
sectionsarray–Present when kind = outline: the entity's field categories, largest first, each with its byte size. Sizes are additive — a set of categories is only retrievable together if their total fits the budge…
sitelinksobject–Map of site code (e.g., "enwiki") to sitelink metadata with title, url, and badges fields.
statementsobject–Map of property ID to array of raw statement objects. Use wikidata_get_statements for resolved claims with label resolution, and whenever this entity's statements are large — its properties parameter…
typestring–Entity type: "item" or "property".

No examples provided.

wikidata_get_labels ~186

Resolve one or more QIDs or PIDs to their human-readable labels and descriptions. Lightweight — returns no claim data. Supports up to 50 IDs per call (batched automatically). Designed for the common agent pattern: receive QIDs from a SPARQL query, then humanize them.

NameTypeReqDescription
idsarrayyesQ-IDs (e.g., "Q76") or P-IDs (e.g., "P31") to resolve. 1–50 IDs per call.
languagesarray–Wikidata language codes for returned labels and descriptions (e.g., ["en", "de", "fr"]). Case-insensitive; "_" is read as "-"; blank entries are dropped, and an empty list means ["en"]. A language wi…
NameTypeReqDescription
entitiesobject–Map of entity ID to labels and descriptions. IDs that were not found are absent.
errorobject–Present when the call failed. Absent on success.
foundnumber–Count of IDs that returned data.
languagesarray–The language codes that were requested.
notFoundarray–IDs from the request that did not return data (not found or invalid).

No examples provided.

wikidata_get_sitelinks ~226

Fetch Wikipedia and Wikimedia project article URLs for a Wikidata item. A sitelink maps a site code (e.g., "enwiki") to a Wikipedia article title and URL. Major items can have 300+ sitelinks across languages. Use sites to filter to specific language editions, or wikis_only to return only Wikipedia links. Only Q-IDs (items) have sitelinks — properties (P-IDs) do not.

NameTypeReqDescription
idstringyesQ-ID of the item (e.g., "Q76"). Only items have sitelinks; properties (P-IDs) are not supported.
sitesarray–Optional filter to specific site codes (e.g., ["enwiki", "frwiki", "dewiki"]). Omit to return all sitelinks.
wikis_onlyboolean–When true, return only Wikipedia sitelinks (site codes ending in "wiki", e.g., "enwiki", "dewiki"). Excludes Wikisource, Wiktionary, Wikiquote, etc.
NameTypeReqDescription
countnumber–Number of sitelinks returned.
errorobject–Present when the call failed. Absent on success.
idstring–The Q-ID whose sitelinks were fetched.
messagestring–Informational note when no sitelinks were found. Absent when sitelinks are present.
sitelinksobject–Map of site code to sitelink metadata. Empty when the entity has no matching sitelinks.

No examples provided.

wikidata_get_statements ~421

Fetch property claims for a Wikidata entity with qualifier and reference detail. Item QIDs and quantity units — in values, qualifiers, and references — are resolved to human-readable labels by default. Use the properties parameter to fetch only specific P-IDs — omitting it returns every statement, and a well-connected item (a country, a major city) carries hundreds of properties: more than fits inline. A set over 24,000 bytes before labels comes back as kind: "outline" — every available P-ID with its byte size, largest first — instead of the statements; re-call with the same id plus properties:[...] naming P-IDs whose sizes sum to 24,000 or less (the retrieval_notice names one such set). Labels are added after that check, so a returned set can run past 24,000 bytes by their size, and a property requested alone is always returned whole — on a major item one property can run to hundreds of kilobytes. Designed for fact verification: "what does Wikidata say about this entity's {property}?". Preferred rank marks the favored statements for a property; check qualifiers and references for temporal scope and evidence.

NameTypeReqDescription
idstringyesQ-ID (e.g., "Q76") or P-ID of the entity to fetch statements for.
languagestring–Wikidata language code for label resolution of QID values (e.g., "en", "de"). Case-insensitive; "_" is read as "-"; blank means "en".
propertiesarray–P-IDs to fetch (e.g., ["P31", "P569", "P27"]). Omit to return all properties (may be large for major items).
resolve_labelsboolean–Resolve item QIDs (label) and quantity unit QIDs (unitLabel) to human-readable labels via one batched label call, covering main values, qualifiers, and reference parts. Set to false to skip label res…
NameTypeReqDescription
errorobject–Present when the call failed. Absent on success.
idstring–The entity ID whose statements were fetched.
kindstring–full — statements carries the claims. outline — the statement set overflowed the inline byte budget, so sections lists the P-IDs available instead; re-call with properties:[...] to retrieve specific…
labelsResolvedboolean–True when the returned statements had labels resolved: resolve_labels was true and kind is full, so every item QID and quantity unit that resolved carries its label. False when resolve_labels was fal…
propertyCountnumber–Number of distinct properties — those returned in full mode, those offered as sections in outline mode.
retrieval_noticestring–Present when kind = outline: how to re-call for specific properties.
sectionsarray–Present when kind = outline: the P-IDs this entity carries statements for, largest first, each sized as the UTF-8 bytes it adds to a response before labels. Sizes add up: copy names whose sizes sum t…
statementCountnumber–Total number of statement objects across all properties. Counted before any overflow, so it reports the entity's full statement volume in both modes.
statementsobject–Map of property ID to array of normalized statements. Each statement has id, rank, property, value (with type-specific fields), optional qualifiers ([{ property, value }]), and optional references —…

No examples provided.

wikidata_resolve_external_id ~472

Look up a Wikidata entity by an external identifier such as a DOI, PubMed ID, ORCID iD, or OpenAlex ID. Returns match=<entity> on success, match=null when not found, and match=null with multipleMatches populated when a Wikidata data integrity issue causes more than one entity to claim the same external ID. Common cross-server join use cases: CrossRef DOI → Wikidata paper QID (P356), PubMed PMID → Wikidata paper QID (P698), ORCID → author QID (P496), OpenAlex ID → entity QID (P10283). The property must be one whose Wikidata data type is external-id — item-valued or media properties (e.g. P31 instance-of, P18 image) are rejected rather than returning an empty match. Known value normalization is applied automatically: surrounding whitespace is trimmed, identifier-resolver URL prefixes are stripped (https://doi.org/, https://pubmed.ncbi.nlm.nih.gov/, https://orcid.org/), DOIs are uppercased, PMID prefixes stripped, ORCID hyphens normalized.

NameTypeReqDescription
languagestring–Wikidata language code for the label and description in the response (e.g., "en", "de"). Case-insensitive; "_" is read as "-"; blank means "en". An entity with no label in this language returns its m…
propertystringyesP-ID of the external identifier property, whose Wikidata data type must be external-id (e.g., "P356" for DOI, "P698" for PubMed ID, "P496" for ORCID, "P10283" for OpenAlex ID, "P345" for IMDb ID). Pr…
valuestringyesThe external identifier value to look up (e.g., "10.1038/nature01234" for a DOI, "32283226" for a PubMed ID, "0000-0002-1825-0097" for an ORCID). A resolver URL is accepted for DOI, PubMed, and ORCID…
NameTypeReqDescription
errorobject–Present when the call failed. Absent on success.
match––Matching entity, or null when no Wikidata entity claims this external identifier (including the case where multipleMatches is populated). A null match is not proof of absence — the Query Service back…
multipleMatchesarray–Present when more than one Wikidata entity claims this external ID (data integrity issue). match is null when this field is present. Inspect the list and select the correct QID manually.
propertystring–The P-ID used for the lookup.
valuestring–The normalized value that was searched (may differ from input due to canonicalization).

No examples provided.

wikidata_search_entities ~235

Search Wikidata for items or properties by text query. Returns QIDs or PIDs with labels, descriptions, and match metadata indicating whether the hit was on a label or alias. Use type="item" for real-world concepts (people, places, works) and type="property" to find predicate P-IDs. The API returns no total count — pagination is offset-based with no result ceiling indicator.

NameTypeReqDescription
languagestring–Wikidata language code for returned labels and descriptions (e.g., "en", "de", "zh-hant"). Case-insensitive; "_" is read as "-"; blank means "en".
limitinteger–Maximum number of results to return. Range: 1–50.
offsetinteger–Pagination offset. Start at 0; increment by limit to page through results.
querystringyesSearch terms to match against entity labels, aliases, and descriptions.
typestring–Entity type to search. Use "item" for Q-IDs (people, places, concepts) or "property" for P-IDs (predicates).
NameTypeReqDescription
capnumber–The limit parameter in effect.
effectiveQuerystring–The search query that was executed.
errorobject–Present when the call failed. Absent on success.
languagestring–The language used for label and description display.
noticestring–Recovery hint when results are empty — echoes filters and suggests how to broaden. Absent when results are present.
resultsarray–Ranked list of matching entities. Empty when no results found.
searchTypestring–The entity type that was searched ("item" or "property").
shownnumber–Number of results returned on this page.
truncatedboolean–True when results were capped at the limit. The Wikidata search API returns no total count — use offset pagination to retrieve more.

No examples provided.

wikidata_sparql_query ~475

Execute a SPARQL SELECT query against the Wikidata Query Service. Full graph power: multi-hop traversals, aggregations, subqueries, OPTIONAL, FILTER, UNION, BIND. Standard Wikidata prefixes (wd:, wdt:, p:, ps:, pq:, wikibase:, bd:, rdfs:, schema:) are auto-injected. The wikibase:label SERVICE is also auto-injected when the query references a ?<var>Label, ?<var>Description, or ?<var>AltLabel variable and declares no label SERVICE of its own — so you can use ?itemLabel without writing the boilerplate. Hard server timeout is 60s; use LIMIT to keep queries fast. Bindings use the SPARQL 1.1 JSON format: each value is { type, value, "xml:lang"?, datatype? }. Each response is held to 64,000 bytes, cut between whole rows: a larger result returns its leading rows with returnedCount and totalCount and a notice — page with ORDER BY plus LIMIT/OFFSET, or aggregate in the query. Use wikidata_get_labels to humanize QID results from this tool.

NameTypeReqDescription
languagestring–Wikidata language code, or a comma-separated fallback list tried in order (e.g., "en", "de", "fr,en"), for the injected wikibase:label SERVICE — the language of ?<var>Label, ?<var>Description, and ?<…
querystringyesSPARQL SELECT query. Any other form — ASK, CONSTRUCT, DESCRIBE, an update, or plain search text — is rejected before it is sent. Standard prefixes (wd:, wdt:, p:, ps:, pq:, wikibase:, bd:, rdfs:, sch…
timeoutinteger–Client-side timeout in seconds (1–55). Capped at 55s — the Wikidata server hard limit is 60s.
NameTypeReqDescription
errorobject–Present when the call failed. Absent on success.
noticestring–Present when the result was cut to fit the response budget (how to page or aggregate for the rest), or when no rows matched (check query logic or broaden filters).
resultsarray–Result bindings: every row when the result fits the 64,000-byte response budget, otherwise the leading rows that fit (returnedCount of totalCount). Each row maps variable names to binding objects wit…
returnedCountnumber–Number of rows in results — fewer than totalCount when the 64,000-byte response budget cut the result.
totalCountnumber–Number of rows the query produced, before any response-budget cut.
truncatedboolean–True when the query produced 10,000 rows (totalCount) — the Wikidata/Blazegraph server-side cap — indicating the result set was likely truncated upstream. False otherwise. Add a LIMIT clause to avoid…
variablesarray–Variable names returned by the SELECT clause.

No examples provided.

Install

How do I install the io.github.cyanheads/wikidata-mcp-server server?

io.github.cyanheads/wikidata-mcp-server is a hosted endpoint at https://wikidata.caseyjhand.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · wikidata.caseyjhand.com

# add to Claude Code
claude mcp add --transport http cyanheads-wikidata-mcp-server 'https://wikidata.caseyjhand.com/mcp'
Common questions

What is the io.github.cyanheads/wikidata-mcp-server server?

io.github.cyanheads/wikidata-mcp-server is listed in the public MCP registry as io.github.cyanheads/wikidata-mcp-server. Search and fetch Wikidata entities, execute SPARQL queries, and resolve external identifiers. This page covers its hosted endpoint (https://wikidata.caseyjhand.com/mcp).

Is the io.github.cyanheads/wikidata-mcp-server server safe to use?

io.github.cyanheads/wikidata-mcp-server scores 81 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.cyanheads/wikidata-mcp-server server expose?

io.github.cyanheads/wikidata-mcp-server exposes 7 tools: wikidata_search_entities, wikidata_get_entity, wikidata_get_labels, wikidata_get_statements, wikidata_get_sitelinks, and 2 more. Their descriptions and schemas cost roughly 2,427 tokens of context every time the server is loaded.

Does the io.github.cyanheads/wikidata-mcp-server server require authentication?

No. We connected to io.github.cyanheads/wikidata-mcp-server without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.github.cyanheads/wikidata-mcp-server server still maintained?

io.github.cyanheads/wikidata-mcp-server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.