Skip to content

io.github.cyanheads/socrata-mcp-server

by cyanheads · remote · local (npm) · no sign-in to list tools · v0.3.0 · published by GitHub user cyanheads

Search and query government open-data portals (Socrata SODA API).

Changes · 2
CompareRegistry entry

6 tools: 2 change things and 4 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http socrata https://socrata.caseyjhand.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnsocrata_query_dataset

    The server marks "socrata_query_dataset" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "socrata_query_dataset" says "query": a word for reading.

    What this check looks for
  • Warnsocrata_dataframe_query

    The server marks "socrata_dataframe_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "socrata_dataframe_query" says "query": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 2Claude Code: ask
  • socrata_dataframe_queryRun SELECT-only SQL against a DataCanvas table populated by socrata_query_dataset.1 finding

    Why it is in this group

    • The name "socrata_dataframe_query" says "query": a word for reading.
    • The description's first verb is "run": a word for a change.
    • The input takes a statement or command to run (input.sql), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "socrata_dataframe_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "socrata_dataframe_query" says "query": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Run SELECT-only SQL against a DataCanvas table populated by socrata_query_dataset. Columns SODA types as number (including aggregate aliases like count(*) as n) are staged as DOUBLE, so numeric comparisons work without a cast (year > 2020, amount < 500). Text and timestamp columns stay VARCHAR — compare times with CAST(date AS TIMESTAMP). Only works when CANVAS_PROVIDER_TYPE=duckdb is set. Use socrata_dataframe_describe to see registered tables and their schemas.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
  • socrata_query_datasetExecute a SoQL query against any dataset on any Socrata portal.1 finding

    Why it is in this group

    • The name "socrata_query_dataset" says "query": a word for reading.
    • The description's first verb is "execute": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "socrata_query_dataset" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "socrata_query_dataset" says "query": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Execute a SoQL query against any dataset on any Socrata portal. Use the search parameter for quick full-text lookup, or combine select/where/group/having/order for full analytical control. Returns rows plus the assembled SoQL string so you can learn the pattern. Columns are referenced by API field name (field_name from socrata_get_dataset, e.g. cuisine_description), never the display label. All SODA 2.1 row values are strings even for numeric columns — check data_type from socrata_get_dataset to determine correct WHERE quoting: Number columns use bare literals (year=2023), Text columns use single-quoted strings (year='2023'). To enumerate distinct values, use select="col, count(*) as n" with group="col" and order="n DESC". When CANVAS_PROVIDER_TYPE=duckdb and rows fill limit, up to 50,000 matching rows spill to a DataCanvas table whatever the limit: list its columns with socrata_dataframe_describe, then run SQL with socrata_dataframe_query.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
Only reads 4Claude Code: allow
  • socrata_dataframe_describeList registered tables in a DataCanvas session — schema, row count, and column names.No findings

    Why it is in this group

    • The name "socrata_dataframe_describe" says "describe": a word for reading.
    Description, as the server wrote it
    List registered tables in a DataCanvas session — schema, row count, and column names. Shows what datasets are available for SQL queries via socrata_dataframe_query. Only meaningful when CANVAS_PROVIDER_TYPE=duckdb is set. Use after socrata_query_dataset spills a large result set to canvas.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
  • socrata_find_datasetsSearch for datasets across all Socrata-powered government open-data portals, or scope to one portal with the domain parameter.No findings

    Why it is in this group

    • The name "socrata_find_datasets" says "find": a word for reading.
    Description, as the server wrote it
    Search for datasets across all Socrata-powered government open-data portals, or scope to one portal with the domain parameter. Returns dataset IDs, names, domains, update timestamps, and column_names — the API field names SoQL takes, not display labels. Use socrata_get_dataset to fetch the typed column schema before writing queries — column_names carry no type information.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: true
  • socrata_get_datasetFetch full metadata and column schema for a Socrata dataset by ID.No findings

    Why it is in this group

    • The name "socrata_get_dataset" says "get": a word for reading.
    Description, as the server wrote it
    Fetch full metadata and column schema for a Socrata dataset by ID. Returns field names, data types, descriptions, row count, and licensing. Always call this before writing a socrata_query_dataset — the column types determine correct WHERE clause syntax: Number columns accept bare literals (year=2023) while Text columns require single-quoted strings (year='2023').

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
  • socrata_list_portalsList known Socrata-powered government open-data portals with their domain, organization name, and approximate dataset count.No findings

    Why it is in this group

    • The name "socrata_list_portals" says "list": a word for reading.
    Description, as the server wrote it
    List known Socrata-powered government open-data portals with their domain, organization name, and approximate dataset count. The catalog is a curated list of 39 well-known portals; dataset counts are fetched from the Discovery API and cached for ~24 hours. Filtering is client-side substring match on the query parameter. Use this first when you do not know which portal to target, then pass the domain to socrata_find_datasets.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http socrata https://socrata.caseyjhand.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__socrata__socrata_find_datasets",
      "mcp__socrata__socrata_get_dataset",
      "mcp__socrata__socrata_list_portals",
      "mcp__socrata__socrata_dataframe_describe"
    ],
    "ask": [
      "mcp__socrata__socrata_query_dataset",
      "mcp__socrata__socrata_dataframe_query"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as socrata. Review it before you use it.