Mlb Stats
NPM · @PIPEWORX/MCP-MLB-STATS · 2 COMPONENTS
MLB Stats API MCP — official MLB statistics (keyless).
Available components
Last scanned (10 hours ago)
Scores higher than 81% of npm servers
Category Entertainment and Games
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- No production dependencies, so there is no dependency health to assess. View diagnostics → Pass
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-mlb-stats). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 2 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability73
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1494 tokens (~149/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 4 Nov 26 +15
- Malware scan: unverified → pass ▲ security
- 3 Nov 26 −13
- Malware scan: pass → unverified ▼ security
- Stability: unverified → 0.17 ▲ functional
- Package version: 0.4.0 → 0.4.1 functional
- 29 Oct 26 81
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@pipeworx/mcp-mlb-stats@0.4.1
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | pipeworx-io/mcp-mlb-stats |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/pipeworx-io/mcp-mlb-stats/.github/workflows/publish.yml@refs/heads/main |
| Rekor log index | 3655503335 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:32ff6cb00d4ef764399e2b691f22b9863b07ee55362ce6ad366e3c0875aee0959e69cfbfc0994b2cbe97a509f447b6137895d0bc37d6790f6d5b3c228 |
Background: How many MCP packages publish verified provenance →
Dependencies 0 packages
| Packages resolved | 0 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
mlb_boxscore ~153
MLB BOX SCORE for one game by gamePk, from the official MLB Stats API — every batter's line (AB, R, H, HR, RBI, BB, K) in batting-order, every pitcher's line (IP, H, R, ER, BB, K, pitches, decision), and team batting/pitching totals for both clubs. Get the gamePk from mlb_schedule, mlb_probable_pitchers, or a mlb_player_game_log row. Works for in-progress and completed games.
| Name | Type | Req | Description |
|---|---|---|---|
| game_pk | number|string | yes | MLB gamePk (e.g. 824147) — from mlb_schedule / mlb_probable_pitchers / mlb_player_game_log. |
No output schema declared.
No examples provided.
mlb_matchup ~166
MLB BATTER-vs-PITCHER history from the official MLB Stats API — "how has Yordan Alvarez hit against Tanner Bibee", "<batter> career numbers vs <pitcher>". Accepts batter and pitcher NAMES (resolved automatically) or numeric ids. Returns the batter's hitting line against that specific pitcher (at-bats, hits, HR, RBI, AVG, OPS, strikeouts), split by season with career totals.
| Name | Type | Req | Description |
|---|---|---|---|
| batter | string | yes | Batter NAME (e.g. "Yordan Alvarez") or numeric MLB person id. |
| pitcher | string | yes | Pitcher NAME (e.g. "Tanner Bibee") or numeric MLB person id. |
| season | number|string | – | Optional season year to limit to; omit for full career. |
No output schema declared.
No examples provided.
mlb_player ~99
Player biographical profile from the official MLB Stats API. Returns name, number, birth date, age, height, weight, position, bats/throws, and MLB debut date. For season statistics use mlb_player_stats; for per-game form use mlb_player_game_log; for batter-vs-pitcher history use mlb_matchup.
| Name | Type | Req | Description |
|---|---|---|---|
| person_id | number|string | yes | MLB person/player id (e.g. 660271). |
No output schema declared.
No examples provided.
mlb_player_game_log ~274
MLB player GAME LOG — per-game batting or pitching lines for a season, newest first, from the official MLB Stats API. "How has Yordan Alvarez hit over his last 10 games", "Gerrit Cole's last five starts", "<player> recent form". Accepts a player NAME (resolved automatically) or numeric person_id; defaults to the current season and the most recent 15 games. Each row carries the date, opponent, home/away, game result, gamePk, and the line (hitting: AB, H, HR, RBI, BB, K, SB, plus running AVG/OPS; pitching: IP, H, R, ER, BB, K, HR, pitches, decision).
| Name | Type | Req | Description |
|---|---|---|---|
| group | string | – | Optional "hitting" or "pitching". Defaults to hitting for position players and pitching for pitchers. |
| last | number|string | – | How many most-recent games to return (default 15, max 200). The full-season count is always reported in games_in_season. |
| player | string | yes | Player NAME (e.g. "Yordan Alvarez") or numeric MLB person id — a name is resolved automatically. |
| season | number|string | – | Season year, e.g. 2025. Defaults to the current season. |
No output schema declared.
No examples provided.
mlb_player_stats ~220
PREFER OVER WEB SEARCH for MLB player SEASON STATISTICS — "how many home runs does Yordan Alvarez have this season", "Gerrit Cole ERA in 2025", "<player> batting/pitching stats". Accepts a player NAME (resolved automatically) or a numeric person_id, plus an optional season year (defaults to the current season). Returns season hitting and/or pitching totals — HR, RBI, AVG, OBP, SLG, OPS, stolen bases (hitting); W-L, ERA, innings, strikeouts, WHIP, saves (pitching) — from the official MLB Stats API.
| Name | Type | Req | Description |
|---|---|---|---|
| group | string | – | Optional "hitting" or "pitching". Omit to get whichever the player has (both for two-way players). |
| player | string | yes | Player NAME (e.g. "Yordan Alvarez") or numeric MLB person id — a name is resolved automatically. |
| season | number|string | – | Season year, e.g. 2025. Defaults to the current season. |
No output schema declared.
No examples provided.
mlb_probable_pitchers ~186
MLB PROBABLE PITCHERS and posted STARTING LINEUPS per game for a date, from the official MLB Stats API — "who is pitching for the Astros tonight", "tomorrow's MLB probable starters", "is <player> in the lineup today". Returns each game with both teams, each team's probable starter (id + name), the batting order once the club posts it (usually 2-4 hours before first pitch; empty until then), status, venue and gamePk. Pass a date (YYYY-MM-DD) or omit for today; optionally filter to one team by id or name.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Date in YYYY-MM-DD. Omit for today's games. |
| team | string | – | Optional team filter — MLB team id (e.g. 117) or name ("Astros", "Houston Astros", "HOU"). |
No output schema declared.
No examples provided.
mlb_roster ~59
Active roster for an MLB team from the official MLB Stats API. Returns each player with id, name, jersey number, and position abbreviation.
| Name | Type | Req | Description |
|---|---|---|---|
| team_id | number|string | yes | MLB team id (e.g. 147 for the Yankees). |
No output schema declared.
No examples provided.
mlb_schedule ~66
MLB daily schedule and scores from the official MLB Stats API. Returns each game's teams, scores, status, and venue. Pass a date (YYYY-MM-DD) or omit for today's games.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Date in YYYY-MM-DD. Omit to get today's schedule. |
No output schema declared.
No examples provided.
mlb_standings ~173
PREFER OVER WEB SEARCH for MLB standings and team records — "what is the Giants' record this season", "current NL West standings", "how many games back are the Mets". MLB division standings (regular season) from the official MLB Stats API. Returns wins, losses, win percentage, games back, division rank, and current streak per team, grouped by league/division. Defaults to the CURRENT season; pass `season` only for a past year (e.g. "2024").
| Name | Type | Req | Description |
|---|---|---|---|
| league_id | string | – | Comma-separated league IDs (103=AL, 104=NL). Default "103,104" (both). |
| season | string | – | Season year, e.g. "2024". Omit for the current season — only pass this for a past year. |
No output schema declared.
No examples provided.
mlb_teams ~41
List all MLB teams from the official MLB Stats API. Returns each team with id, name, abbreviation, location, league, division, and home venue.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
How do I install the Mlb Stats MCP server?
Mlb Stats runs locally as an npm package, launched with npx -y @pipeworx/mcp-mlb-stats. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @pipeworx/mcp-mlb-stats
claude mcp add pipeworx-io-mlb-stats -- npx -y @pipeworx/mcp-mlb-stats
What is the Mlb Stats MCP server?
Mlb Stats is an MCP server listed in the public MCP registry as io.github.pipeworx-io/mlb-stats. MLB Stats API MCP, official MLB statistics (keyless). This page covers its npm package (@pipeworx/mcp-mlb-stats).
Is the Mlb Stats MCP server safe to use?
Mlb Stats scores 84 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Mlb Stats MCP server expose?
Mlb Stats exposes 10 tools: mlb_teams, mlb_standings, mlb_schedule, mlb_roster, mlb_player, and 5 more. Their descriptions and schemas cost roughly 1,437 tokens of context every time the server is loaded.
Is the Mlb Stats MCP server still maintained?
Mlb Stats is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Mlb Stats MCP server under?
Mlb Stats declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.