# Govinfo (npm · @pipeworx/mcp-govinfo) GovInfo.gov MCP — full text of US government publications - Trust score: 83/100 (high trust) - Change this week: +4 - Registry status: active - Liveness: live - Owner verified: no - Last scored: 2026-11-05 ## Components - remote · `gateway.pipeworx.io`: 77/100, [markdown](https://verifymcp.io/servers/pipeworx-io-govinfo/govinfo-mcp.md), [page](https://verifymcp.io/servers/pipeworx-io-govinfo/govinfo-mcp) - npm · `@pipeworx/mcp-govinfo`: 83/100 (this document), [markdown](https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo.md), [page](https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo) ## Channel facts - Registry: `npm` - Package: `@pipeworx/mcp-govinfo` - Version: `0.2.1` - Transport: `stdio` ## Trust breakdown How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog) Scored 2026-11-05. - **Supply Chain Security**: 100/100 - No malware found by supply-chain analysis. - No known CVEs affecting this package version or its production dependencies. - No install/post-install scripts declared. - No production dependencies, so there is no dependency health to assess. - **Provenance & Transparency**: 97/100 - Source repository is publicly reachable at the declared URL. - Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-govinfo). - Clear OSI-approved license (MIT). - Actively maintained (last published 3 days ago). - Disclosure check failed: no security disclosure policy was found in the source repository. - **Schema Quality & AI Usability**: 67/100 - AI-judged instruction clarity (excellent). - Context-footprint check failed: tool/resource definitions use about 1269 tokens (~181/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params. - Usage-examples check failed: none of the tools include examples. - **Stability & Change Management**: 23/100 - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses. - **Tool Coverage**: 100/100 - 100% of tools have a non-trivial description (not blank, and not just the tool's name). - 100% of tool parameters carry a description. - **Tool Safety**: 100/100 - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured. - We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation. - An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it. - **Capabilities**: 100/100 - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28. ## Install ### How do I install the Govinfo MCP server? Govinfo runs locally as an npm package, launched with npx -y @pipeworx/mcp-govinfo. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation. ### Claude ```bash claude mcp add pipeworx-io-govinfo -- npx -y @pipeworx/mcp-govinfo ``` ### Cursor ```json { "mcpServers": { "pipeworx-io-govinfo": { "command": "npx", "args": [ "-y", "@pipeworx/mcp-govinfo" ] } } } ``` ### VS Code ```json { "servers": { "pipeworx-io-govinfo": { "command": "npx", "args": [ "-y", "@pipeworx/mcp-govinfo" ] } } } ``` ### Codex ```bash codex mcp add pipeworx-io-govinfo -- npx -y @pipeworx/mcp-govinfo ``` ### opencode ```json { "$schema": "https://opencode.ai/config.json", "mcp": { "pipeworx-io-govinfo": { "type": "local", "command": [ "npx", "-y", "@pipeworx/mcp-govinfo" ], "enabled": true } } } ``` ### OpenClaw ```bash openclaw mcp add pipeworx-io-govinfo --command npx --arg -y --arg @pipeworx/mcp-govinfo ``` ### Hermes ```yaml mcp_servers: pipeworx-io-govinfo: command: "npx" args: ["-y", "@pipeworx/mcp-govinfo"] ``` ### Netclaw ```json { "McpServers": { "pipeworx-io-govinfo": { "Transport": "stdio", "Command": "npx", "Arguments": [ "-y", "@pipeworx/mcp-govinfo" ] } } } ``` ### Vellum ```bash assistant mcp add pipeworx-io-govinfo -t stdio -c npx -a -y @pipeworx/mcp-govinfo ``` ### Other ```json { "mcpServers": { "pipeworx-io-govinfo": { "command": "npx", "args": [ "-y", "@pipeworx/mcp-govinfo" ] } } } ``` ## Changelog Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims. ### 2026-11-05 (score 83, +1) No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes. ### 2026-11-03 (score 82, +16) - [security improvement] Malware scan: unverified → pass ### 2026-11-02 (score 66, −15) - [security regression] Malware scan: pass → unverified - [functional] Package version: 0.2.0 → 0.2.1 ### 2026-11-01 (score 81, +1) No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes. ### 2026-10-30 (score 80, +1) - [functional regression] Security disclosure: unverified → fail ### 2026-10-29 (score 79) First indexed and scored. ## MCP tools (7) ### `list_collections` (~59 tokens) List GovInfo collections (BILLS, CFR, USCODE, FR, CHRG, CRPT, HMAN, PLAW, SERIALSET, USCOURTS, etc.) with package counts. Use the collection code with search_packages to filter. ### `search_packages` (~256 tokens) Full-text + faceted search across GovInfo. Filter by one or more collection codes (BILLS, FR, CFR, USCODE, CHRG, CRPT, CREC, PLAW, USCOURTS...), date range, congress, and free-text query. Several codes search the union of those collections. Returns package IDs, titles, collection and issue dates. Input parameters: - `collections` (string): Collection codes, comma- or space-separated (e.g. "CHRG" or "CHRG,CRPT"). Several codes return the union of those collections — "CHRG,CRPT" gives every package in either. Codes come from list_collect… - `congress` (number): Congress number (e.g., 118) — for BILLS/CHRG/CRPT - `date_from` (string): YYYY-MM-DD - `date_to` (string): YYYY-MM-DD - `limit` (number): Alias for page_size, 1-100. - `offset_mark` (string): Pagination cursor from previous response - `page_size` (number): Results per page, 1-100 (default 25). `limit` works as an alias. - `query` (string, required): Free-text search ### `get_package` (~71 tokens) Metadata for a single package by packageId (e.g., "BILLS-118hr1234ih", "FR-2024-05-12"). Returns title, dates, citations, granule count, download links (PDF/XML/MODS). Input parameters: - `package_id` (string, required): GovInfo packageId ### `list_granules` (~108 tokens) List granules within a package — e.g., sections of a CFR title, individual entries in a Federal Register issue. Returns granule IDs + titles. Input parameters: - `limit` (number): Alias for page_size, 1-100. - `offset_mark` (string): Pagination cursor - `package_id` (string, required): GovInfo packageId - `page_size` (number): Granules per page, 1-100 (default 100). `limit` works as an alias. ### `get_granule` (~82 tokens) Fetch summary metadata for a single granule (sub-unit) within a GovInfo package, given package_id and granule_id (both from list_granules). Returns title, class, and provenance fields from the GovInfo summary endpoint. Input parameters: - `granule_id` (string, required): Granule ID - `package_id` (string, required): GovInfo packageId ### `gao_red_book` (~373 tokens) Find the chapter of GAO's Principles of Federal Appropriations Law — the Red Book — that governs a federal appropriations, fiscal-law or government-funding question, described in plain words. Answers questions about what an appropriation may lawfully be spent on (the purpose statute and the necessary expense rule), how long it stays available (the bona fide needs rule, expired and cancelled accounts, no-year and multi-year money), how much may be obligated (the Antideficiency Act, augmentation, miscellaneous receipts, apportionment), recording valid obligations, continuing resolutions and funding lapses, accountable-officer liability and relief, grants and cooperative agreements, guaranteed and insured loans, acquisition, real property, and claims for and against the government. Returns the ranked chapters together with the full table of contents, each row naming which EDITION it comes from: GAO publishes the Red Book chapter by chapter, so the current treatise is a mix of Fourth and Third Edition chapters and this reads that composition live from GAO on every call. Every row carries the chapter PDF, its source_last_modified and age_days. This is official interpretation by the agency that decides federal appropriations law, not statute — pair it with uscode or cfr text for the underlying provision. Input parameters: - `chapter` (number): Return one specific Red Book chapter number (1-15) instead of ranking by topic. - `include_scope_text` (boolean): Fetch GAO's own scope summary for the Fourth Edition chapters from their product pages (3 extra parallel requests). Default true. - `topic` (string): The fiscal-law topic or question in plain words, e.g. "can we pay for food at a conference", "bona fide needs rule", "Antideficiency Act violation", "obligating funds under a continuing resolution". ### `gao_comptroller_decisions` (~267 tokens) Search Comptroller General decisions and opinions — the B-numbered rulings in which GAO decides federal appropriations and fiscal-law disputes, the precedent the Red Book itself cites. Give a topic in plain words (purpose statute violation, augmentation of appropriations, gift acceptance authority, improper payment, interagency agreement) and get the decisions, each with its B-number, decision date and GovInfo package. Filters out GAO audit and performance reports so the result set is decisions only, and reports how many of the underlying hits were decisions. Complements gao_red_book (the treatise) and gao_protests_search (bid-protest decisions, a different GAO docket). Input parameters: - `date_from` (string): YYYY-MM-DD - `date_to` (string): YYYY-MM-DD - `include_reports` (boolean): Also return GAO audit/performance reports from the same search, flagged as reports. Default false. - `limit` (number): Alias for page_size. - `offset_mark` (string): Pagination cursor from a previous response. - `page_size` (number): Decisions to return, 1-100 (default 25). - `query` (string, required): Free-text topic, e.g. "augmentation of appropriations" or "necessary expense". ## Diagnostics Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo#diagnostics ## Score history - 2026-11-05: 83 - 2026-11-04: 82 - 2026-11-03: 82 - 2026-11-02: 66 - 2026-11-01: 81 - 2026-10-31: 80 - 2026-10-30: 80 - 2026-10-29: 79 ## Common questions ### What is the Govinfo MCP server? Govinfo is an MCP server listed in the public MCP registry as io.github.pipeworx-io/govinfo. GovInfo.gov MCP, full text of US government publications. This page covers its npm package (@pipeworx/mcp-govinfo). ### Is the Govinfo MCP server safe to use? Govinfo scores 83 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm. ### What tools does the Govinfo MCP server expose? Govinfo exposes 7 tools: list_collections, search_packages, get_package, list_granules, get_granule, and 2 more. Their descriptions and schemas cost roughly 1,216 tokens of context every time the server is loaded. ### Is the Govinfo MCP server still maintained? Govinfo is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced. ### What licence is the Govinfo MCP server under? Govinfo declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls. ## Links - npm package: https://www.npmjs.com/package/@pipeworx/mcp-govinfo - Socket report: https://socket.dev/npm/package/@pipeworx/mcp-govinfo - Repository: https://github.com/pipeworx-io/mcp-govinfo - Website: https://pipeworx.io/packs/govinfo - Changelog RSS feed: https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo.xml - Changelog JSON feed: https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo.json - HTML version of this page: https://verifymcp.io/servers/pipeworx-io-govinfo/pipeworx-mcp-govinfo