Nihr
NPM · @PIPEWORX/MCP-NIHR · 2 COMPONENTS
UK NIHR (National Institute for Health and Care Research) open-data MCP.
Available components
Last scanned (7 hours ago)
Scores higher than 69% of npm servers
Category Health and Science
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- No production dependencies, so there is no dependency health to assess. View diagnostics → Pass
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-nihr). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability59
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1584 tokens (~316/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +16
- Malware scan: unverified → pass ▲ security
- 3 Nov 26 −15
- Malware scan: pass → unverified ▼ security
- Package version: 0.2.0 → 0.2.1 functional
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 78
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@pipeworx/mcp-nihr@0.2.1
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | pipeworx-io/mcp-nihr |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/pipeworx-io/mcp-nihr/.github/workflows/publish.yml@refs/heads/main |
| Rekor log index | 3679285402 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:1b98717bf924f53805bebbba1ef5ac7a62289bbf3cb892eba81fcdc58a13520e5e3604cf62b5441d8dc2d0c9439b4f95737f4fa2a437256e42f6e101b |
Background: How many MCP packages publish verified provenance →
Dependencies 0 packages
| Packages resolved | 0 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
nihr_award_holders ~293
Find the researchers named on UK NIHR awards by personal name or ORCID identifier. Returns each matching award holder with their ORCID, their role on the award (Chief Investigator, Joint Lead Applicant or Award Holder) and the NIHR project ids they hold, so an agent can pivot straight into nihr_get_award for the grant detail. Answers "which NIHR grants does Professor X hold", "who is the chief investigator on this NIHR award", and ORCID-to-grant lookups across 12,644 award-holder records.
| Name | Type | Req | Description |
|---|---|---|---|
| involvement_type | string | – | Restrict to one role: "Chief Investigator", "Joint Lead Applicant" or "Award Holder". |
| limit | number | – | Max award holders to return, 1-100 (default 20). |
| name | string | – | Researcher name or any part of it, e.g. "Hajat", "Emma Bland". Titles such as Professor and Dr are part of the stored name and may be included or omitted. |
| offset | number | – | Pagination offset (default 0). |
| orcid | string | – | ORCID identifier in full, e.g. "0000-0002-3086-362X". |
| project_id | string | – | NIHR project id, e.g. "NIHR208893" or "002/0028", to list everyone named on that one award. |
No output schema declared.
No examples provided.
nihr_awards_by_organisation ~276
Total up UK NIHR health research funding held by a university, NHS trust or company. Give any part of the institution name and get back the number of NIHR awards, the summed award value in GBP, the distinct organisation-name variants that matched, a breakdown by programme, and the individual awards with their values and dates. Answers "how much NIHR money does Imperial College hold", "how many NIHR awards has Guy's and St Thomas won", and institutional league-table comparisons.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max individual awards to list, 1-100 (default 20). The totals always cover every match, not just the listed page. |
| min_amount | number | – | Only count and list awards worth at least this many GBP. |
| offset | number | – | Pagination offset for the listed awards (default 0). |
| organisation | string | yes | Institution name or fragment, matched as a case-insensitive substring of contracted_organisation, e.g. "Imperial", "University of Leeds", "Manchester University NHS Foundation Trust". |
| project_status | string | – | Restrict to one status: Active, Complete, Contracted or Discontinued. |
| start_from | string | – | Only awards starting on or after this date, YYYY-MM-DD — useful for "funding won since 2020". |
No output schema declared.
No examples provided.
nihr_awards_by_programme ~269
Break UK NIHR funding down by programme or funding stream: award counts, total value in GBP, mean award size and the date range of awards in each. Called with no arguments it lists every NIHR programme that actually exists with its totals, which is the way to discover valid programme names before filtering elsewhere. Answers "which NIHR programme spends the most", "how many awards has the Health Technology Assessment programme made", and "what NIHR fellowship schemes exist and how big are they".
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | Only include groups whose name contains this case-insensitive substring, e.g. "Fellowship", "Public Health", "Global". |
| group_by | string | – | Field to aggregate on (default "programme"). "funding_stream" is the finer-grained scheme name; "programme_type" splits Research from Career Development. |
| limit | number | – | Max groups to return, 1-100 (default 30). |
| project_status | string | – | Restrict the aggregation to one status: Active, Complete, Contracted or Discontinued. |
| sort_by | string | – | Ordering of the groups (default total_desc, biggest spend first). |
| start_from | string | – | Only aggregate awards starting on or after this date, YYYY-MM-DD. |
No output schema declared.
No examples provided.
nihr_get_award ~177
Retrieve one UK NIHR award in full by its project id (either the modern form NIHR208893 or the older slash form 002/0028). Returns the plain-English abstract and the scientific abstract, award value in GBP, programme, funding stream and status, start and end dates, the contracted organisation with postcode and latitude/longitude, HRCS and UKCRC health-category coding, the fundingawards.nihr.ac.uk record link, and every named award holder with their ORCID and role. Use when an agent has an NIHR project reference and needs the detail behind it.
| Name | Type | Req | Description |
|---|---|---|---|
| project_id | string | yes | NIHR project id exactly as published, e.g. "NIHR208893", "002/0028" or "DRF-2009-02-122". Slashes are handled. |
No output schema declared.
No examples provided.
nihr_search_awards ~517
Search UK NIHR (National Institute for Health and Care Research) health research grants by keyword over award titles and abstracts. Returns each award's project id, title, NIHR programme and funding stream, contracted organisation, award value in GBP, start and end dates, chief investigator name, and the fundingawards.nihr.ac.uk link. Filter by programme name, project status (Active, Complete, Contracted, Discontinued) and a minimum award amount; sort by award value or start date. Answers questions like "which NIHR grants fund diabetes research", "the largest active NIHR cancer awards", or "recent NIHR mental-health funding".
| Name | Type | Req | Description |
|---|---|---|---|
| funding_stream | string | – | NIHR funding stream, matched as a case-insensitive substring, e.g. "Doctoral Fellowship", "Commissioned", "Researcher-led". |
| limit | number | – | Max awards to return, 1-100 (default 20). |
| max_amount | number | – | Only awards worth at most this many GBP. |
| min_amount | number | – | Only awards worth at least this many GBP (award_amount_from_dh), e.g. 1000000 for awards of £1m and up. |
| offset | number | – | Pagination offset (default 0). |
| organisation | string | – | Contracted organisation, matched as a case-insensitive substring, e.g. "Oxford", "Guy's and St Thomas". |
| programme | string | – | NIHR programme name, matched as a case-insensitive substring, e.g. "Health Technology Assessment", "Public Health", "Fellowships". Call nihr_awards_by_programme with no arguments to list the real pro… |
| project_status | string | – | Exact award status: Active, Complete, Contracted or Discontinued. |
| query | string | – | Free-text keyword or phrase, e.g. "diabetes", "antimicrobial resistance", "dementia care". Matched against award titles and, unless title_only is set, the plain-English and scientific abstracts. |
| sort_by | string | – | Ordering of results (default amount_desc, biggest award first). |
| start_from | string | – | Only awards starting on or after this date, YYYY-MM-DD. |
| start_to | string | – | Only awards starting on or before this date, YYYY-MM-DD. |
| title_only | boolean | – | Restrict the keyword match to the award title for a tighter, more on-topic result set (default false, which also searches both abstracts). |
No output schema declared.
No examples provided.
How do I install the Nihr MCP server?
Nihr runs locally as an npm package, launched with npx -y @pipeworx/mcp-nihr. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @pipeworx/mcp-nihr
claude mcp add pipeworx-io-nihr -- npx -y @pipeworx/mcp-nihr
What is the Nihr MCP server?
Nihr is an MCP server listed in the public MCP registry as io.github.pipeworx-io/nihr. UK NIHR (National Institute for Health and Care Research) open-data MCP. This page covers its npm package (@pipeworx/mcp-nihr).
Is the Nihr MCP server safe to use?
Nihr scores 81 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Nihr MCP server expose?
Nihr exposes 5 tools: nihr_search_awards, nihr_get_award, nihr_awards_by_organisation, nihr_award_holders, nihr_awards_by_programme. Their descriptions and schemas cost roughly 1,532 tokens of context every time the server is loaded.
Is the Nihr MCP server still maintained?
Nihr is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Nihr MCP server under?
Nihr declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.