Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.malkreide/lobbywatch-mcp

PYPI · LOBBYWATCH-MCP · SCANNED SEP 20

Lobbywatch.ch transparency data on parliamentarians, interests, access badges

Available components

+1 this week 80 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
  • 1 of 34 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency35
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • License check failed: the license (MIT License) isn't a recognized OSI-approved license. See how to fix → Fail
  • Actively maintained (last published 48 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability82
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 1264 tokens (~140/item across 9 items; 8 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
  • Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 0% of tool parameters carry a description.Fail
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Install

How do I install the io.github.malkreide/lobbywatch-mcp server?

io.github.malkreide/lobbywatch-mcp runs locally as a PyPI package, launched with uvx lobbywatch-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

pypi · lobbywatch-mcp

# add to Claude Code
claude mcp add malkreide-lobbywatch-mcp -- uvx lobbywatch-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "malkreide-lobbywatch-mcp": {
      "command": "uvx",
      "args": [
        "lobbywatch-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "malkreide-lobbywatch-mcp": {
      "command": "uvx",
      "args": [
        "lobbywatch-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add malkreide-lobbywatch-mcp -- uvx lobbywatch-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "malkreide-lobbywatch-mcp": {
      "type": "local",
      "command": [
        "uvx",
        "lobbywatch-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add malkreide-lobbywatch-mcp --command uvx --arg lobbywatch-mcp
# ~/.hermes/config.yaml
mcp_servers:
  malkreide-lobbywatch-mcp:
    command: "uvx"
    args: ["lobbywatch-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "malkreide-lobbywatch-mcp": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "lobbywatch-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add malkreide-lobbywatch-mcp -t stdio -c uvx -a lobbywatch-mcp
// mcp.json
{
  "mcpServers": {
    "malkreide-lobbywatch-mcp": {
      "command": "uvx",
      "args": [
        "lobbywatch-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 19 Sept 26 +13
    • Malware scan: unverified → pass security
    • Stability: pass → 0.83 functional
  • 18 Sept 26 0
    • Stability: 0.97 → pass security
  • 17 Sept 26 −14
    • Malware scan: pass → unverified security
  • 15 Sept 26 +15
    • Malware scan: unverified → pass security
  • 14 Sept 26 −14
    • Malware scan: pass → unverified security
  • 12 Sept 26 −2
    • Stability: pass → 0.80 functional
  • 11 Sept 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed pypi/lobbywatch-mcp@0.3.6

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem pypi

Background: How many MCP packages publish verified provenance →

Install scripts 1 script
Hook Tier Command
build_backend allowlisted hatchling.build

Background: Why install scripts are a supply-chain risk →

Dependencies 34 packages
Packages resolved 34
No linked repository 1
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 8 exposed · ~1,185 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
lobbywatch_dump_status ~45

Return current dump cache status without forcing a refresh. Use cases: - "How fresh is the cached data right now?" - "When was the dump last loaded?"

Input schema present but exposes no named parameters.

NameTypeReqDescription
age_seconds
cached_at
loadedbooleanyes
provenancestringyesWhich endpoint / dump the payload came from
record_countinteger
sourcestring

No examples provided.

lobbywatch_get_lobbygruppe ~104

Fetch a lobby group (interessengruppe) from the live Lobbywatch dataIF, including its connected organisations and parliamentarians. Uses the live REST API since this endpoint returns fresh data. Use cases: - "Look up 'economiesuisse' and list connected MPs" - "Who's affiliated with the lobby group #42?" - "Show me all parliamentarians linked to the pharma lobby"

NameTypeReqDescription
name_or_idstringyes
NameTypeReqDescription
lobbygruppe
provenancestringyesWhich endpoint / dump the payload came from
sourcestring

No examples provided.

lobbywatch_get_parlamentarier ~166

Look up a Swiss federal parliamentarian and return their full profile, including all declared/researched interessenbindungen. On a fuzzy miss, the response surfaces near-miss candidates so the LLM can prompt the user with "did you mean…?" suggestions instead of treating the empty result as authoritative (audit ARCH-003). Args: name_or_id: Either the numeric Lobbywatch ID (as string) or a name. Name matching is fuzzy — partial last names work. Use cases: - "Show me Anna Mustermann's full lobbying profile" - "What conflicts of interest does parliamentarian #42 declare?" - "Look up Wehrli — give me everything you have"

NameTypeReqDescription
name_or_idstringyes
NameTypeReqDescription
parlamentarier
provenancestringyesWhich endpoint / dump the payload came from
sourcestring
suggestionsarrayNear-miss fuzzy candidates when the lookup failed (ARCH-003)

No examples provided.

lobbywatch_get_ranking ~167

Rank parliamentarians by a criterion. Args: kriterium: One of "anzahl_interessenbindungen", "anzahl_hauptberuflich". kommission: Optional commission abbreviation filter (e.g. "WBK-N"). partei: Optional party filter (e.g. "SP", "SVP", "Mitte"). limit: Top-N to return (1–100). Use cases: - "Top 10 SP MPs by total mandate count" - "Which Mitte-Fraktion members have the most full-time mandates?" - "Rank WBK-N by IB count — who's most involved?"

NameTypeReqDescription
kommission
kriteriumstring
limitinteger
partei
NameTypeReqDescription
eintraegearray
kriteriumstringyes
provenancestringyesWhich endpoint / dump the payload came from
sourcestring

No examples provided.

lobbywatch_get_transparenzquote ~109

Aggregate the verguetungstransparenz_beurteilung values across all parliamentarians (or a commission subset) and return the distribution. Useful to answer: 'How transparent is the education commission on compensation disclosure?' Use cases: - "How transparent is the FK-N on compensation disclosure?" - "Distribution of transparency labels across the whole parliament" - "Compare WBK-N transparency vs the council average"

NameTypeReqDescription
kommission
NameTypeReqDescription
nach_bewertungobject
provenancestringyesWhich endpoint / dump the payload came from
quote_ausreichend
scopestringyes
sourcestring
totalintegeryes

No examples provided.

lobbywatch_list_interessenbindungen ~190

Return the list of interessenbindungen (conflicts of interest) for one parliamentarian, optionally restricted to full-time or currently-active mandates. On a fuzzy miss, near-miss candidates are returned in ``suggestions`` (audit ARCH-003). Args: name_or_id: ID or name (fuzzy). nur_hauptberuflich: If True, only main-occupation mandates. nur_aktiv: If True, drop mandates with an end date (bis) set. Use cases: - "Which active mandates does Jositsch hold today?" - "List Anna Mustermann's full-time mandates only" - "Give me every IB ever declared by parliamentarian #1"

NameTypeReqDescription
name_or_idstringyes
nur_aktivboolean
nur_hauptberuflichboolean
NameTypeReqDescription
countintegeryes
interessenbindungenarray
parlamentarier_idintegeryes
provenancestringyesWhich endpoint / dump the payload came from
sourcestring
suggestionsarrayNear-miss fuzzy candidates when the lookup failed (ARCH-003)

No examples provided.

lobbywatch_refresh_dump ~93

Force re-download of the weekly Lobbywatch dump. Returns the new cache status. Reports progress via the MCP Context (audit SDK-003) so long-running downloads (~17 MB compressed) surface useful feedback to the calling LLM and operator. Use cases: - "Force a fresh download — the data looks stale" - "I just heard about a new declaration — refresh and re-check"

Input schema present but exposes no named parameters.

NameTypeReqDescription
age_seconds
cached_at
loadedbooleanyes
provenancestringyesWhich endpoint / dump the payload came from
record_countinteger
sourcestring

No examples provided.

lobbywatch_search_parlamentarier_nach_branche ~311

Find parliamentarians with interessenbindungen matching a search term against the linked organisation's name, alias, and (when available) branche field. Optional commission filter. Note: the Lobbywatch "essential" dump does not embed a branche taxonomy on each organisation — branche is referenced by id and resolved via the separate interessengruppe table. Version 0.1 therefore performs a substring match against organisation names and the branche field when present. Version 0.2 will add full cross-reference resolution. Args: branche_query: Substring match (case-insensitive) against ``organisation.anzeige_name``, ``organisation.name``, ``organisation.branche`` (where present), e.g. "Verlag", "Pharma", "Bank", "Krankenkasse", "Bildung". kommission: Commission abbreviation to restrict the result to, e.g. "WBK-N" for the education commission of the National Council. limit: Max number of {parlamentarier, ib} pairs returned (1–200). Use cases: - "Which WBK-N members hold mandates in the publishing industry?" - "Cross-filter Pharma × FK-N to surface health-policy lobbyists" - "List every parliamentarian with a 'Krankenkasse' connection"

NameTypeReqDescription
branche_querystringyes
kommission
limitinteger
NameTypeReqDescription
countintegeryes
provenancestringyesWhich endpoint / dump the payload came from
querystringyes
sourcestring
trefferarrayList of {parlamentarier, interessenbindung} pairs matching the branche

No examples provided.

Common questions

What is the io.github.malkreide/lobbywatch-mcp server?

io.github.malkreide/lobbywatch-mcp is listed in the public MCP registry as io.github.malkreide/lobbywatch-mcp. Lobbywatch.ch transparency data on parliamentarians, interests, access badges. This page covers its PyPI package (lobbywatch-mcp).

Is the io.github.malkreide/lobbywatch-mcp server safe to use?

io.github.malkreide/lobbywatch-mcp scores 80 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.malkreide/lobbywatch-mcp server expose?

io.github.malkreide/lobbywatch-mcp exposes 8 tools: lobbywatch_get_parlamentarier, lobbywatch_list_interessenbindungen, lobbywatch_search_parlamentarier_nach_branche, lobbywatch_get_ranking, lobbywatch_get_transparenzquote, and 3 more. Their descriptions and schemas cost roughly 1,185 tokens of context every time the server is loaded.

Is the io.github.malkreide/lobbywatch-mcp server still maintained?

io.github.malkreide/lobbywatch-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.