io.github.malkreide/openlex-mcp
PYPI · OPENLEX-MCP · SCANNED SEP 20
Canton Zurich legislation via ZH-Lex with full-text search and article extraction
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security50
- Malware scan not yet available for this package.Unverified
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
- 3 of 58 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency35
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (MIT License) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 48 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability64
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1771 tokens (~221/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the io.github.malkreide/openlex-mcp server?
io.github.malkreide/openlex-mcp runs locally as a PyPI package, launched with uvx openlex-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · openlex-mcp
claude mcp add malkreide-openlex-mcp -- uvx openlex-mcp
{
"mcpServers": {
"malkreide-openlex-mcp": {
"command": "uvx",
"args": [
"openlex-mcp"
]
}
}
} {
"servers": {
"malkreide-openlex-mcp": {
"command": "uvx",
"args": [
"openlex-mcp"
]
}
}
} codex mcp add malkreide-openlex-mcp -- uvx openlex-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"malkreide-openlex-mcp": {
"type": "local",
"command": [
"uvx",
"openlex-mcp"
],
"enabled": true
}
}
} openclaw mcp add malkreide-openlex-mcp --command uvx --arg openlex-mcp
mcp_servers:
malkreide-openlex-mcp:
command: "uvx"
args: ["openlex-mcp"] {
"McpServers": {
"malkreide-openlex-mcp": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"openlex-mcp"
]
}
}
} assistant mcp add malkreide-openlex-mcp -t stdio -c uvx -a openlex-mcp
{
"mcpServers": {
"malkreide-openlex-mcp": {
"command": "uvx",
"args": [
"openlex-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 −3
- Stability: pass → 0.80 functional
- 18 Sept 26 0
- Stability: 0.97 → pass security
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +12
- Malware scan: unverified → pass ▲ security
- Stability: pass → 0.80 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/openlex-mcp@0.2.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 58 packages
| Packages resolved | 58 |
|---|---|
| Stale | 2 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
openlex__zhlaw_find_education_laws ~234
Sucht gezielt im Zürcher Bildungsrecht (Ordnungsnummern 412.x). <use_case>Bevorzuge dieses Tool gegenüber openlex__zhlaw_search_laws wenn die Anfrage klar im Bildungsbereich liegt (Schule, Lehrpersonen, Kindergarten, Sonderpädagogik, Tagesstrukturen). Schneller und präziser als die allgemeine Suche, da nur die 412.x-Serie (VSG, VSV, LPG, LPVO, VSM u.a.) durchsucht wird.</use_case> <important_notes>Sucht ausschliesslich in aktiven 412.x-Gesetzen. Bei keinen Treffern: automatischer Fallback auf alle Rechtsgebiete mit Hinweis im message- Feld. Für Artikel innerhalb eines gefundenen Gesetzes: openlex__zhlaw_search_articles. Synergie: Fundstelle + swiss-courts-mcp → Rechtsprechung finden.</important_notes> <example>query='Elternrat', limit=10</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
openlex__zhlaw_get_article ~173
Extrahiert einen einzelnen Artikel aus einem Zürcher Gesetz. <use_case>Wenn der genaue Wortlaut eines bestimmten Artikels benötigt wird. Voraussetzung: Gesetz und Artikelnummer sind bekannt. Um zuerst relevante Artikel zu finden: openlex__zhlaw_search_articles nutzen.</use_case> <important_notes>Unterstützt Standard-Artikelnummern (28), Buchstaben-Artikel (28a) und Bis-Artikel (28bis). Liefert Titel, alle Absätze und Volltext des Artikels. Gibt count=0 zurück wenn der Artikel nicht existiert — Artikelnummer ohne 'Art.' angeben (nur die Zahl).</important_notes> <example>law_identifier='VSG', article_number='28'</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
openlex__zhlaw_get_law ~207
Ruft ein Zürcher Gesetz anhand der Ordnungsnummer oder Abkürzung ab. <use_case>Wenn die Ordnungsnummer oder Abkürzung eines Gesetzes bereits bekannt ist und Metadaten oder Volltext abgerufen werden sollen. Um ein Gesetz erst zu finden, openlex__zhlaw_search_laws oder openlex__zhlaw_find_education_laws vorschalten.</use_case> <important_notes>Unterstützt LS-Nummern ('412.100') und Abkürzungen ('VSG'). include_content=True liefert den Volltext (bis 5000 Zeichen, dann truncated=True). Bei Truncation: openlex__zhlaw_get_article für einzelne Artikel verwenden. Wichtige Gesetze: VSG, LPG, PBG, StG, KV.</important_notes> <example>identifier='VSG', include_content=False</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
openlex__zhlaw_get_law_metadata ~208
Ruft aktuelle Metadaten eines Gesetzes live von zh.ch ab. <use_case>Wenn der aktuelle Stand eines Gesetzes auf zh.ch geprüft werden soll — z.B. ob es kürzlich geändert wurde, welche PDF-Version aktuell gilt oder welche ZH-Lex URL direkt verlinkt werden kann. Einziges Tool mit Live-HTTP-Aufruf; alle anderen Tools lesen den lokalen Cache.</use_case> <important_notes>Macht einen echten HTTP-Request an www.zh.ch (ca. 1–3 s). Erfordert Netzwerkzugang. Liefert: Seitentitel, PDF-Links, Änderungsdatum, ZH-Lex URL. Bei 404 oder Timeout: found=False mit Fehlerdetail im error-Feld. Nur Ordnungsnummern akzeptiert (kein Abkürzungs-Lookup).</important_notes> <example>sr_number='412.100'</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
openlex__zhlaw_list_laws ~214
Listet Zürcher Gesetze auf mit optionalem Filter nach Rechtsgebiet. <use_case>Wenn eine strukturierte Übersicht aller Gesetze eines Rechtsgebiets benötigt wird (z.B. alle aktiven Bildungsgesetze). Für gezielte Textsuche ist openlex__zhlaw_search_laws besser; für reines Bildungsrecht openlex__zhlaw_find_education_laws.</use_case> <important_notes>sr_prefix filtert nach Ordnungsnummer-Prefix (412=Bildung, 331=Steuern, 700=Bau, 131=Verfassung, 810=Gesundheit). active_only=True blendet aufgehobene Gesetze aus. Unterstützt Paginierung via offset. Gibt Titel, Abkürzung, SR-Nummer und Status zurück — keinen Volltext.</important_notes> <example>sr_prefix='412', active_only=True, limit=50</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
openlex__zhlaw_search_articles ~177
Durchsucht alle Artikel eines bestimmten Gesetzes nach einem Begriff. <use_case>Wenn bekannt ist, in welchem Gesetz gesucht werden soll, aber nicht welcher Artikel relevant ist. Liefert alle Treffer-Artikel mit Inhalt. Für einen einzelnen Artikel mit bekannter Nummer: openlex__zhlaw_get_article.</use_case> <important_notes>Parst das Gesetz in einzelne Artikel und durchsucht Titel und Inhalt. Suche ist case-insensitive, kein FTS5 (einfaches Substring-Match). Gibt count=0 wenn kein Artikel den Begriff enthält. Benötigt Volltext im Cache — bei fehlendem Inhalt: Hinweis im message-Feld.</important_notes> <example>law_identifier='VSG', query='Elternrat'</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
openlex__zhlaw_search_laws ~251
Volltextsuche in allen Zürcher Gesetzen mit FTS5-Ranking. <use_case>Allgemeine Suche nach einem Rechtsbegriff über alle ~970 kantonalen Gesetze. Wähle dieses Tool wenn das Rechtsgebiet unbekannt ist. Für das Bildungsrecht (412.x) ist openlex__zhlaw_find_education_laws schneller und präziser. Um Artikel innerhalb eines bekannten Gesetzes zu finden, nutze openlex__zhlaw_search_articles.</use_case> <important_notes>FTS5-Syntax: AND, OR, NOT, Phrasensuche "...". Ergebnisse nach BM25-Relevanz sortiert. Max 50 Treffer pro Aufruf (limit-Parameter). sr_prefix filtert nach Rechtsgebiet (412=Bildung, 331=Steuern, 700=Bau). Sucht im lokalen Cache — Aktualität der Metadaten via openlex__zhlaw_get_law_metadata prüfen.</important_notes> <example>query='Elternrat OR Elternmitwirkung', sr_prefix='412', limit=10</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
openlex__zhlaw_update_cache ~187
Aktualisiert den lokalen Cache der Zürcher Gesetzesdaten. <use_case>Nur aufrufen wenn Gesetzes-Suchergebnisse veraltet wirken oder der Cache explizit neu geladen werden soll. Der Cache wird automatisch beim Start befüllt und ist 24 Stunden gültig — manuelles Update ist selten nötig.</use_case> <important_notes>Lädt ~970 Gesetze von HuggingFace (rcds/swiss_legislation) in die lokale SQLite-DB mit FTS5-Index (~25 s erster Lauf). force=False überspringt den Download wenn Cache <24h alt (gibt status='cache_fresh' zurück). force=True erzwingt Neudownload. Erfordert Internetzugang zu HuggingFace.</important_notes> <example>force=False</example>
| Name | Type | Req | Description |
|---|---|---|---|
| params | – | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| message | – | – | – |
| provenance | string | yes | – |
| result_type | string | – | – |
| results | array | – | – |
| source | string | – | – |
No examples provided.
What is the io.github.malkreide/openlex-mcp server?
io.github.malkreide/openlex-mcp is listed in the public MCP registry as io.github.malkreide/openlex-mcp. Canton Zurich legislation via ZH-Lex with full-text search and article extraction. This page covers its PyPI package (openlex-mcp).
Is the io.github.malkreide/openlex-mcp server safe to use?
io.github.malkreide/openlex-mcp scores 61 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.malkreide/openlex-mcp server expose?
io.github.malkreide/openlex-mcp exposes 8 tools: openlex__zhlaw_search_laws, openlex__zhlaw_get_law, openlex__zhlaw_get_article, openlex__zhlaw_list_laws, openlex__zhlaw_find_education_laws, and 3 more. Their descriptions and schemas cost roughly 1,651 tokens of context every time the server is loaded.
Is the io.github.malkreide/openlex-mcp server still maintained?
io.github.malkreide/openlex-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.