# Starfetch (npm · @starfetch-js/mcp)

Query public astronomy catalogs through metadata-first TAP and ADQL tools.

- Trust score: 80/100 (high trust)
- Change this week: +45
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@starfetch-js/mcp`: 80/100 (this document), [markdown](https://verifymcp.io/servers/starfetch-js-starfetch/starfetch-js-mcp.md), [page](https://verifymcp.io/servers/starfetch-js-starfetch/starfetch-js-mcp)

## Channel facts

- Registry: `npm`
- Package: `@starfetch-js/mcp`
- Version: `0.3.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects @hono/node-server 1.19.17, reached via @modelcontextprotocol/sdk > @hono/node-server. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (99 of 103), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to starfetch-js/starfetch).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 8 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 85/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1553 tokens (~62/item across 25 items; 12 tools + 13 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add starfetch-js-starfetch -- npx -y @starfetch-js/mcp
```

### Codex

```bash
codex mcp add starfetch-js-starfetch -- npx -y @starfetch-js/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "starfetch-js-starfetch": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@starfetch-js/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add starfetch-js-starfetch --command npx --arg -y --arg @starfetch-js/mcp
```

### Hermes

```yaml
mcp_servers:
  starfetch-js-starfetch:
    command: "npx"
    args: ["-y", "@starfetch-js/mcp"]
```

### Other

```json
{
  "mcpServers": {
    "starfetch-js-starfetch": {
      "command": "npx",
      "args": [
        "-y",
        "@starfetch-js/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 79, +53)

- [security regression] GHSA-frvp-7c67-39w9 affects this package: medium
- [security regression] Known CVEs: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] The attested source repository moved: starfetch-js/starfetch
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Stability: unverified → 0.20
- [functional] Licence: MIT

### 2026-07-31 (score 26, −9)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 35)

First indexed and scored.

## MCP tools (12)

### `starfetch_list_presets` (~26 tokens)

List TAP presets

List built-in TAP service presets before selecting an explicit target for metadata inspection.

Output parameters:

- `data` (array)
- `diagnostics` (object)

### `starfetch_registry_search` (~69 tokens)

Search TAP registry

Search VO registry metadata when no built-in preset fits; inspect the selected service before querying it.

Input parameters:

- `maxrec` (integer): TAP MAXREC row limit for registry results.
- `query` (string): Registry search text.
- `registryUrl` (string): Explicit RegTAP service URL.

Output parameters:

- `data` (array)
- `diagnostics` (object)

### `starfetch_tap_availability` (~74 tokens)

Read TAP availability

Check whether the selected TAP service reports itself available; an unavailable service is not an empty catalog result.

Input parameters:

- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (object)
- `diagnostics` (object)

### `starfetch_tap_capabilities` (~73 tokens)

Read TAP capabilities

Inspect the selected TAP service's languages, formats, and authentication requirements before using service-specific features.

Input parameters:

- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (object)
- `diagnostics` (object)

### `starfetch_tap_tables` (~69 tokens)

List TAP tables

List tables on the selected TAP service before choosing an exact table for ADQL.

Input parameters:

- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (array)
- `diagnostics` (object)

### `starfetch_tap_columns` (~91 tokens)

List TAP columns

Inspect names, datatypes, units, and descriptions for an exact metadata-discovered table before constructing ADQL.

Input parameters:

- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `table` (string, required): Exact TAP table name returned by prior metadata inspection.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (array)
- `diagnostics` (object)

### `starfetch_tap_query` (~184 tokens)

Run bounded TAP query

Run a small bounded synchronous TAP ADQL query after inspecting the exact table and columns. Use TOP in ADQL and/or maxrec, and treat tool errors as failures rather than empty scientific results.

Input parameters:

- `format` (string, required): MCP result output format.
- `maxrec` (integer): TAP MAXREC row limit. Defaults to 100 when omitted.
- `query` (string, required): Exact metadata-backed ADQL query text. Use TOP for a query-level bound; do not use LIMIT.
- `runId` (string): Optional TAP RUNID request value.
- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `uploads` (array): TAP uploads forwarded to the service; local file paths are not supported.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data`
- `diagnostics` (object)

### `starfetch_tap_submit_job` (~186 tokens)

Submit TAP async job

Submit metadata-backed bounded ADQL as an explicit TAP async job when synchronous querying is insufficient. Preserve the exact query and use starfetch_tap_query for small work.

Input parameters:

- `maxrec` (integer): TAP MAXREC row limit. Defaults to 100 when omitted.
- `query` (string, required): Exact metadata-backed ADQL query text. Use TOP for a query-level bound; do not use LIMIT.
- `requestFormat` (string): TAP RESPONSEFORMAT request value for the async job result.
- `runId` (string): Optional TAP RUNID request value.
- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `uploads` (array): TAP uploads forwarded to the service; local file paths are not supported.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (object)
- `diagnostics` (object)

### `starfetch_tap_job_status` (~84 tokens)

Read TAP async job status

Read the current phase and links for a TAP async job.

Input parameters:

- `jobIdOrUrl` (string, required): TAP async job id or absolute job URL.
- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (object)
- `diagnostics` (object)

### `starfetch_tap_job_wait` (~149 tokens)

Wait for TAP async job

Poll a TAP async job until completion, timeout, or terminal failure. This is an explicit wait and never starts a background job.

Input parameters:

- `backoff` (boolean): Increase the poll interval.
- `intervalMs` (integer): Poll interval in milliseconds.
- `jobIdOrUrl` (string, required): TAP async job id or absolute job URL.
- `maxIntervalMs` (integer): Maximum backoff interval in milliseconds.
- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `timeoutMs` (integer): Wait timeout in milliseconds.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (object)
- `diagnostics` (object)

### `starfetch_tap_job_fetch` (~122 tokens)

Fetch TAP async job result

Fetch a TAP async job result. JSON and JSONL conversion supports VOTable, CSV, and TSV rows.

Input parameters:

- `format` (string, required): MCP result output format.
- `jobIdOrUrl` (string, required): TAP async job id or absolute job URL.
- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `sourceFormat` (string): Actual TAP result format for async job output.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data`
- `diagnostics` (object)

### `starfetch_tap_job_delete` (~82 tokens)

Delete TAP async job

Delete a TAP async job from the remote service.

Input parameters:

- `jobIdOrUrl` (string, required): TAP async job id or absolute job URL.
- `service` (string): Known Starfetch TAP service preset selected for this workflow; use this or url.
- `url` (string): Explicit TAP base URL selected for this workflow; use this or service.

Output parameters:

- `data` (object)
- `diagnostics` (object)

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/starfetch-js-starfetch/starfetch-js-mcp#diagnostics

## Score history

- 2026-08-03: 80
- 2026-08-02: 79
- 2026-08-01: 26
- 2026-07-31: 26
- 2026-07-30: 35
- 2026-07-28: 35
- 2026-07-27: 35

## Links

- npm package: https://www.npmjs.com/package/@starfetch-js/mcp
- Socket report: https://socket.dev/npm/package/@starfetch-js/mcp
- Repository: https://github.com/starfetch-js/starfetch
- Changelog RSS feed: https://verifymcp.io/servers/starfetch-js-starfetch/starfetch-js-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/starfetch-js-starfetch/starfetch-js-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/starfetch-js-starfetch/starfetch-js-mcp