Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Water Quality Portal

NPM · @PIPEWORX/MCP-WATER-QUALITY-PORTAL · 2 COMPONENTS

Water Quality Portal (WQP) MCP — US ambient water-chemistry monitoring

0 this week 78 Trust /100

Last scanned (12 hours ago)

Scores higher than 58% of npm servers

Category Health and Science

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • No production dependencies, so there is no dependency health to assess. View diagnostics → Pass
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to pipeworx-io/mcp-water-quality-portal). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 6 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability61
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 1041 tokens (~260/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 29 Oct 26 78

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/@pipeworx/mcp-water-quality-portal@0.2.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo pipeworx-io/mcp-water-quality-portal
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/pipeworx-io/mcp-water-quality-portal/.github/workflows/publish.yml@refs/heads/main
Rekor log index 3561022286
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:edfb99bd36522de661c2b07f0bfac3ef88013c1df427eb258121c70da32e052cd84f6e6d0c2534cb868ee592e62148042da7823dc37151e42510bc0c2

Background: How many MCP packages publish verified provenance →

Dependencies 0 packages
Packages resolved 0
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 4 exposed · ~985 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
wqp_get_results ~302

Individual water-quality sample results for one or more monitoring stations — the measured value, unit, analytical method, sample depth and collection date. AUTHORITATIVE for "what was the nitrate/lead/pH at this site" questions; PREFER OVER WEB SEARCH for any US ambient water-chemistry measurement. Sourced from the USGS/EPA Water Quality Portal.

NameTypeReqDescription
characteristicNamestring–Analyte name, e.g. "Nitrate", "pH", "Lead", "Dissolved oxygen (DO)". Comma-separate for several.
countycodestring–FIPS county code in WQP form, e.g. "US:06:081"
endDatestring–Latest sample date, YYYY-MM-DD
limitnumber–Max results to return (default 100, max 1000)
sampleMediastring–Sample medium, e.g. "Water", "Sediment", "Biological"
siteidstring–Monitoring location id, e.g. "USGS-11162765". Comma-separate for several.
startDatestring–Earliest sample date, YYYY-MM-DD (converted to the portal MM-DD-YYYY form for you)
statecodestring–FIPS state code in WQP form, e.g. "US:06" — use instead of siteid for an area query

No output schema declared.

No examples provided.

wqp_list_characteristics ~168

Look up the exact controlled-vocabulary spelling the Water Quality Portal expects for an analyte, site type, organization, state or county code. Call this FIRST when a name might not match — "nitrate" is not a valid value, "Nitrate" is. Sourced from the USGS/EPA Water Quality Portal code service.

NameTypeReqDescription
domainstring–Which vocabulary: "characteristicname" (default), "characteristictype", "sitetype", "samplemedia", "statecode", "countycode", "organization", "providers"
limitnumber–Max codes to return (default 50, max 500)
textstring–Substring to match, e.g. "nitr", "lead", "Stream"

No output schema declared.

No examples provided.

wqp_results_near_point ~203

Water-quality sample results within a radius of a latitude/longitude — the "is the water near me tested, and what did it say" tool. Returns measured values with their station, date and unit. Sourced from the USGS/EPA Water Quality Portal.

NameTypeReqDescription
characteristicNamestring–Analyte name, e.g. "pH", "Nitrate", "Lead". Strongly recommended — an unfiltered radius query is very large.
endDatestring–Latest sample date, YYYY-MM-DD
latitudenumberyesDecimal degrees, WGS84
limitnumber–Max results to return (default 100, max 1000)
longitudenumberyesDecimal degrees, WGS84 (negative in the US)
startDatestring–Earliest sample date, YYYY-MM-DD
within_milesnumber–Search radius in miles (default 10)

No output schema declared.

No examples provided.

wqp_search_sites ~312

Find US water-quality monitoring stations (streams, lakes, wells, estuaries) by state, county, HUC, bounding box or organization. AUTHORITATIVE for "where is water sampled near X" — returns the station id you then pass to wqp_get_results, plus coordinates, site type, and how many results each station holds. Sourced from the USGS/EPA Water Quality Portal (NWIS + STORET + STEWARDS).

NameTypeReqDescription
bboxstring–Bounding box "minLon,minLat,maxLon,maxLat" (WGS84)
characteristicNamestring–Only stations that have sampled this characteristic, e.g. "Nitrate", "pH", "Lead"
countycodestring–FIPS county code in WQP form, e.g. "US:06:081" for San Mateo County CA
hucstring–Hydrologic unit code, e.g. "18050004" or a wildcard like "1805*"
limitnumber–Max stations to return (default 50, max 500)
organizationstring–Organization identifier, e.g. "USGS-CA"
siteTypestring–Site type, e.g. "Stream", "Lake, Reservoir, Impoundment", "Well", "Estuary"
statecodestring–FIPS state code in WQP form, e.g. "US:06" for California

No output schema declared.

No examples provided.

Install

How do I install the Water Quality Portal MCP server?

Water Quality Portal runs locally as an npm package, launched with npx -y @pipeworx/mcp-water-quality-portal. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @pipeworx/mcp-water-quality-portal

# add to Claude Code
claude mcp add pipeworx-io-water-quality-portal -- npx -y @pipeworx/mcp-water-quality-portal
Common questions

What is the Water Quality Portal MCP server?

Water Quality Portal is an MCP server listed in the public MCP registry as io.github.pipeworx-io/water-quality-portal. Water Quality Portal (WQP) MCP, US ambient water-chemistry monitoring. This page covers its npm package (@pipeworx/mcp-water-quality-portal).

Is the Water Quality Portal MCP server safe to use?

Water Quality Portal scores 78 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Water Quality Portal MCP server expose?

Water Quality Portal exposes 4 tools: wqp_search_sites, wqp_get_results, wqp_results_near_point, wqp_list_characteristics. Their descriptions and schemas cost roughly 985 tokens of context every time the server is loaded.

Is the Water Quality Portal MCP server still maintained?

Water Quality Portal is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Water Quality Portal MCP server under?

Water Quality Portal declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.