io.github.gabrielmahia/diaspora-mcp
PYPI · DIASPORA-MCP
Guides for Kenyans abroad: citizenship, taxes, investment, document verification. Not legal advice.
Available components
Last scanned (6 hours ago)
Scores higher than 94% of PyPI servers
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs setuptools.build_meta at install time, a recognised build step with no custom scripting around it. View diagnostics → Pass
- 1 of 15 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to gabrielmahia/diaspora-mcp). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 2 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability72
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 950 tokens (~158/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
- Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 −4
- Stability: pass → 0.73 functional
- 3 Nov 26 +15
- Malware scan: unverified → pass ▲ security
- 2 Nov 26 −15
- Malware scan: pass → unverified ▼ security
- Package version: 0.1.9 → 0.1.10 functional
- 30 Oct 26 0
- Stability: 0.97 → pass security
- 29 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- Stability: pass → 0.97 functional
- 28 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- 27 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 26 Oct 26 −15
- Malware scan: pass → unverified ▼ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed pypi/diaspora-mcp@0.1.10
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | pypi |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | gabrielmahia/diaspora-mcp |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/gabrielmahia/diaspora-mcp/.github/workflows/publish.yml@refs/tags/v0.1.10 |
| Rekor log index | 3646646630 |
| Predicate type | PyPI publish attestation https://docs.pypi.org/attestations/publish/v1 |
| Subject digest | sha256:af2e2ba81239170e669273395d40ebb7c8689ad3e2caab53b5230d093166a014 |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | setuptools.build_meta |
Background: Why install scripts are a supply-chain risk →
Dependencies 15 packages
| Packages resolved | 15 |
|---|---|
| Stale | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
diaspora_community_guide Diaspora Community Guide ~147
Kenyan diaspora organisations by country, with their focus, plus investment facilitation, voter registration and remittance pointers. Use when someone abroad wants to find community or professional groups. country is matched case-insensitively; an unrecognised country returns an error listing the supported countries. Returns the source label, the country, the organisations, the Kenya Investment Authority contact, voter registration and a remittance note citing the Central Bank of Kenya's USD 4.94 billion for 2024. A short sample directory labelled DEMO: verify each organisation. Read-only; no side effects.
| Name | Type | Req | Description |
|---|---|---|---|
| country | – | – | Country such as USA or UK (default USA); others return an error. |
Structured output declared, but exposes no named fields.
No examples provided.
diaspora_tax_guide Diaspora Tax Guide ~161
Summarise the tax position of a Kenyan living abroad in a country in the table (such as the USA, UK or Canada): Kenyan tax on Kenya income, the residence country's rules and double-taxation points. Use when someone asks what tax they owe at home or abroad. residence_country is matched case-insensitively; an unrecognised country returns an error listing the supported ones. Returns the source label, the country, the tax guidance, a key principle, the KRA portal and a disclaimer. Static summary labelled DEMO and NOT tax advice: consult a cross-border tax accountant. Read-only; no side effects.
| Name | Type | Req | Description |
|---|---|---|---|
| residence_country | – | – | Country of residence such as USA, UK or Canada (default USA); others return an error. |
Structured output declared, but exposes no named fields.
No examples provided.
diaspora_verification Diaspora Verification ~147
Guidance on authenticating documents for use in Kenya from abroad (birth certificate, marriage certificate, academic and other documents): who certifies them and the apostille route, since Kenya is party to the Hague Apostille Convention. Use when someone needs a foreign or Kenyan document accepted. document_type selects an entry; if none match, a general instruction to contact the nearest Kenyan embassy is returned; with no argument all documents are listed. Returns the source label, the guidance, the apostille note and the embassy finder. Labelled DEMO: confirm requirements with the receiving authority. Read-only; no side effects.
| Name | Type | Req | Description |
|---|---|---|---|
| document_type | – | – | Optional document such as birth_certificate; omit to list all. |
Structured output declared, but exposes no named fields.
No examples provided.
dual_citizenship_guide Dual Citizenship Guide ~164
Explain Kenyan dual citizenship for someone abroad: eligibility, how to keep or regain Kenyan citizenship, the Kenyan passport, diaspora registration and voting from abroad, with embassy contacts. Use when a Kenyan abroad asks whether they can hold two nationalities. current_citizenship is echoed back; the guidance is general. Returns the source label, current_citizenship, the dual-citizenship rules, passport and registration steps and embassy contacts. A static summary of the Citizenship and Immigration Act 2011 labelled DEMO and not legal advice: verify fees and forms with the embassy or the Department of Immigration. Read-only; no side effects.
| Name | Type | Req | Description |
|---|---|---|---|
| current_citizenship | – | – | Your current citizenship, such as USA; only echoed back (default USA). |
Structured output declared, but exposes no named fields.
No examples provided.
immigration_status_guide Immigration Status Guide ~160
General notes on immigration statuses in the USA, UK and Canada (for example green card holder or student) and what each allows. Use when a Kenyan abroad asks what a status permits or where to get legal help. country selects the guide; status matches an entry by text and, if none match, a general consult-an-attorney note is returned; with no status all statuses are listed. Returns the source label, the country, the guidance and a disclaimer. Static summary labelled DEMO and NOT immigration legal advice: rules change, so consult a licensed immigration attorney. Read-only; no side effects.
| Name | Type | Req | Description |
|---|---|---|---|
| country | – | – | USA, UK or Canada (default USA). |
| status | – | – | Optional status such as green_card_holder; omit to list all. |
Structured output declared, but exposes no named fields.
No examples provided.
kenya_homeland_investment Kenya Homeland Investment ~144
Investment options at home for a budget in US dollars: M-Akiba bonds, money market funds, NSE shares and a REIT, with minimums, indicative returns and risk. Use when a diaspora investor asks where to put a given amount. Every option is returned; budget_usd only changes the closing recommendation text. Returns the source label, budget_usd, the options, a platform recommendation and a pointer to faida-mcp. Indicative returns labelled DEMO and not investment advice. Read-only; no side effects.
| Name | Type | Req | Description |
|---|---|---|---|
| budget_usd | – | – | Amount in US dollars to invest (default 10000); changes only the recommendation text. |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the io.github.gabrielmahia/diaspora-mcp server?
io.github.gabrielmahia/diaspora-mcp runs locally as a PyPI package, launched with uvx diaspora-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · diaspora-mcp
claude mcp add gabrielmahia-diaspora-mcp -- uvx diaspora-mcp
What is the io.github.gabrielmahia/diaspora-mcp server?
io.github.gabrielmahia/diaspora-mcp is listed in the public MCP registry as io.github.gabrielmahia/diaspora-mcp. Guides for Kenyans abroad: citizenship, taxes, investment, document verification. Not legal advice. This page covers its PyPI package (diaspora-mcp).
Is the io.github.gabrielmahia/diaspora-mcp server safe to use?
io.github.gabrielmahia/diaspora-mcp scores 91 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.gabrielmahia/diaspora-mcp server expose?
io.github.gabrielmahia/diaspora-mcp exposes 6 tools: dual_citizenship_guide, diaspora_tax_guide, kenya_homeland_investment, diaspora_verification, diaspora_community_guide, immigration_status_guide. Their descriptions and schemas cost roughly 923 tokens of context every time the server is loaded.
Is the io.github.gabrielmahia/diaspora-mcp server still maintained?
io.github.gabrielmahia/diaspora-mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.gabrielmahia/diaspora-mcp server under?
io.github.gabrielmahia/diaspora-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.