Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "stats-compass": {
      "type": "http",
      "url": "https://mcp.statscompass.io/mcp"
    }
  }
}

claude mcp add --transport http stats-compass https://mcp.statscompass.io/mcp

[mcp_servers.stats-compass]
url = "https://mcp.statscompass.io/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "stats-compass": {
      "type": "remote",
      "url": "https://mcp.statscompass.io/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "stats-compass": {
      "type": "http",
      "url": "https://mcp.statscompass.io/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=stats-compass&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnN0YXRzY29tcGFzcy5pby9tY3AifQ%3D%3D"
}

{
  "servers": {
    "stats-compass": {
      "type": "http",
      "url": "https://mcp.statscompass.io/mcp"
    }
  }
}

{
  "mcpServers": {
    "stats-compass": {
      "httpUrl": "https://mcp.statscompass.io/mcp"
    }
  }
}

extensions:
  "stats-compass":
    enabled: true
    name: "stats-compass"
    type: streamable_http
    uri: "https://mcp.statscompass.io/mcp"
    timeout: 300

Quality 75 / 100good

protocoln/a · weight 25

n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)

authorization83 · weight 15

pass
auth.prmProtected Resource Metadata (RFC 9728) published
pass
auth.as_metadataauthorization server metadata reachable
warn
auth.cimdonly Dynamic Client Registration, deprecated in 2026-07-28 in favour of CIMD
n/a
auth.secret_in_urlno templated URL

tool hygienen/a · weight 30

n/a
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool list unknown

dependencies67 · weight 15

fail
deps.known_vulns3 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-rww4-4w9c-7733 in [email protected] (direct, fixed in 3.2.0), GHSA-vv7q-7jx5-f767 in [email protected] (direct, fixed in 3.2.0), GHSA-rgxp-2hwp-jwgg in [email protected] (indirect, fixed in 23.0.1); 2 more of lower severity or without a fix
pass
deps.mcp_sdk_versionmcp 1.30.0, no known advisory
pass
deps.resolvable[email protected] resolved: 110 packages

Tool list unknown · checked 2026-10-20 12:45 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 94 / 100

provenance80

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +reachable +uptime-100% +updated-9d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] PyPI109 dependencies, resolved · MCP SDK mcp 1.30.0 · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-vv7q-7jx5-f767FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability	critical	`[email protected]`direct	fixed in `3.2.0`
GHSA-rww4-4w9c-7733FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities	high	`[email protected]`direct	fixed in `3.2.0`
GHSA-rgxp-2hwp-jwggApache Arrow: Potential use-after-free when reading IPC file with pre-buffering	high	`[email protected]`indirect	fixed in `23.0.1`
GHSA-m8x7-r2rg-vh5gFastMCP has a Command Injection vulnerability - Gemini CLI	moderate	`[email protected]`direct	fixed in `3.2.0`
GHSA-w8v5-vhqr-4h9vDiskCache has unsafe pickle deserialization	moderate	`[email protected]`indirect	no fix yet

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.statscompass.io/mcp` streamable-http	oauth2 AS: https://mcp.statscompass.io/	yes	100%	590 ms	–	2026-10-20

package	registry	version	runtime	secrets
`stats-compass-mcp`	pypi	0.3.34	–

Tools (0)

No tools observed. Tools appear once a credential-free probe can list them.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.oogunbiyi21/stats-compass",
  "title": "Stats Compass",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.statscompass.io/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.3.34",
  "packages": [
    {
      "version": "0.3.34",
      "transport": {
        "type": "stdio"
      },
      "identifier": "stats-compass-mcp",
      "registryType": "pypi"
    }
  ],
  "repository": {
    "url": "https://github.com/oogunbiyi21/stats-compass-mcp",
    "source": "github"
  },
  "description": "50+ pandas-powered tools for data loading, cleaning, visualization, and ML workflows"
}