@cyanheads/cdc-health-mcp-server 0.6.4 → 0.6.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/.mcpbignore +10 -0
  2. package/CLAUDE.md +52 -17
  3. package/README.md +9 -3
  4. package/dist/index.js +1 -0
  5. package/dist/index.js.map +1 -1
  6. package/manifest.json +51 -0
  7. package/package.json +30 -10
  8. package/server.json +4 -4
package/.mcpbignore ADDED
@@ -0,0 +1,10 @@
1
+ .env*
2
+ .mcpregistry_*
3
+ .claude/
4
+ Dockerfile
5
+ bun.lock
6
+ bunfig.toml
7
+ wrangler.toml
8
+ biome.json
9
+ tsconfig*.json
10
+ vitest.config.ts
package/CLAUDE.md CHANGED
@@ -1,8 +1,9 @@
1
1
  # Agent Protocol
2
2
 
3
3
  **Server:** cdc-health-statistics-mcp-server
4
- **Version:** 0.6.4
5
- **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core)
4
+ **Version:** 0.6.6
5
+ **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.13`
6
+ **Engines:** Bun ≥1.3.2, Node ≥24.0.0
6
7
 
7
8
  > **Read the framework docs first:** `node_modules/@cyanheads/mcp-ts-core/CLAUDE.md` contains the full API reference — builders, Context, error codes, exports, patterns. This file covers server-specific conventions only.
8
9
 
@@ -64,8 +65,9 @@ When the user asks what to do next, what's left, or needs direction, suggest rel
64
65
  5. **Add tests** — scaffold tests for existing definitions using the `add-test` skill
65
66
  6. **Field-test definitions** — exercise tools/resources/prompts with real inputs using the `field-test` skill, get a report of issues and pain points
66
67
  7. **Run `devcheck`** — lint, format, typecheck, and security audit
67
- 8. **Run the `polish-docs-meta` skill** — finalize README, CHANGELOG, metadata, and agent protocol for shipping
68
- 9. **Run the `maintenance` skill** — sync skills and dependencies after framework updates
68
+ 8. **Run the `security-pass` skill** — audit handlers for MCP-specific security gaps: output injection, scope blast radius, input sinks, tenant isolation
69
+ 9. **Run the `polish-docs-meta` skill** — finalize README, CHANGELOG, metadata, and agent protocol for shipping
70
+ 10. **Run the `maintenance` skill** — investigate changelogs, adopt upstream changes, and sync skills after `bun update --latest`
69
71
 
70
72
  Tailor suggestions to what's actually missing or stale — don't recite the full list every time.
71
73
 
@@ -73,11 +75,12 @@ Tailor suggestions to what's actually missing or stale — don't recite the full
73
75
 
74
76
  ## Core Rules
75
77
 
76
- - **Logic throws, framework catches.** Tool/resource handlers are pure — throw on failure, no `try/catch`. The framework catches, classifies, and formats. Prefer typed error contracts (`errors[]` + `ctx.fail`) for declared failure modes; fall back to error factories (`notFound()`, `validationError()`, etc.) for ad-hoc throws.
78
+ - **Logic throws, framework catches.** Tool/resource handlers are pure — throw on failure, no `try/catch`. Plain `Error` is fine; the framework catches, classifies, and formats. Use error factories (`notFound()`, `validationError()`, etc.) when the error code matters.
77
79
  - **Use `ctx.log`** for request-scoped logging. No `console` calls.
78
80
  - **Use `ctx.state`** for tenant-scoped storage. Never access persistence directly.
79
81
  - **Check `ctx.elicit` / `ctx.sample`** for presence before calling.
80
82
  - **Secrets in env vars only** — never hardcoded.
83
+ - **Close the loop on issues.** When implementing work tracked by a GitHub issue, comment on the issue with what landed and close it. Do both — a comment without a close leaves stale issues open; a close without a comment leaves no record of what shipped. The comment is for future readers — state the concrete changes, not the conversation that produced them.
81
84
 
82
85
  ---
83
86
 
@@ -285,7 +288,7 @@ src/
285
288
 
286
289
  Skills are modular instructions in `skills/` at the project root. Read them directly when a task matches — e.g., `skills/add-tool/SKILL.md` when adding a tool.
287
290
 
288
- **Agent skill directory:** Copy skills into the directory your agent discovers (Claude Code: `.claude/skills/`, others: equivalent). This makes skills available as context without needing to reference `skills/` paths manually. After framework updates, re-copy to pick up changes.
291
+ **Agent skill directory:** Copy skills into the directory your agent discovers (Claude Code: `.claude/skills/`, others: equivalent). Skills then load as context without referencing `skills/` paths. After framework updates, run the `maintenance` skill — Phase B re-syncs the agent directory.
289
292
 
290
293
  Available skills:
291
294
 
@@ -299,17 +302,19 @@ Available skills:
299
302
  | `add-prompt` | Scaffold a new prompt definition |
300
303
  | `add-service` | Scaffold a new service integration |
301
304
  | `add-test` | Scaffold test file for a tool, resource, or service |
302
- | `field-test` | Exercise tools/resources/prompts via live HTTP + JSON-RPC, report findings |
303
- | `tool-defs-analysis` | Read-only audit of definition language across the surface (10 categories) |
305
+ | `field-test` | Exercise tools/resources/prompts with real inputs, verify behavior, report issues |
306
+ | `tool-defs-analysis` | Read-only audit of MCP definition language across an existing surface — voice, leaks, defaults, recovery hints, output descriptions |
307
+ | `security-pass` | Audit server for MCP-flavored security gaps: output injection, scope blast radius, input sinks, tenant isolation |
308
+ | `code-simplifier` | Post-session cleanup against `git diff` — modernize syntax, consolidate duplication, align with the codebase |
309
+ | `devcheck` | Lint, format, typecheck, audit |
304
310
  | `polish-docs-meta` | Finalize docs, README, metadata, and agent protocol for shipping |
305
- | `security-pass` | Eight-axis security audit before release (injection, scope, input sinks, leakage, etc.) |
306
- | `release-and-publish` | Post-wrapup ship workflow — npm, MCP Registry, GHCR |
307
- | `maintenance` | Investigate, adopt, and verify dependency updates (framework changelog review + skill/script sync) |
308
- | `migrate-mcp-ts-template` | Migrate a fork of mcp-ts-template to depend on the framework as a package |
311
+ | `git-wrapup` | Land working-tree changes as a versioned commit + annotated tag — version bump, changelog, verify, tag. Local only. |
312
+ | `release-and-publish` | Push + npm + MCP Registry + GH Release + Docker. Picks up from `git-wrapup` |
313
+ | `maintenance` | Investigate changelogs, adopt upstream changes, sync skills to agent dirs |
309
314
  | `report-issue-framework` | File a bug or feature request against `@cyanheads/mcp-ts-core` via `gh` CLI |
310
315
  | `report-issue-local` | File a bug or feature request against this server's own repo via `gh` CLI |
311
316
  | `api-auth` | Auth modes, scopes, JWT/OAuth |
312
- | `api-canvas` | DataCanvas Tier 3 SQL/analytical workspace + `spillover()` helper (opt-in via CANVAS_PROVIDER_TYPE) |
317
+ | `api-canvas` | DataCanvas: register tabular data, run SQL, export, plus the `spillover()` helper for big result sets — Tier 3 opt-in |
313
318
  | `api-config` | AppConfig, parseConfig, parseEnvConfig, env vars |
314
319
  | `api-context` | Context interface, logger, state, progress |
315
320
  | `api-errors` | McpError, JsonRpcErrorCode, typed error contracts, error patterns |
@@ -317,7 +322,7 @@ Available skills:
317
322
  | `api-services` | LLM, Speech, Graph services |
318
323
  | `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
319
324
  | `api-testing` | createMockContext, test patterns |
320
- | `api-utils` | Formatting, parsing, security, pagination, scheduling |
325
+ | `api-utils` | Formatting, parsing, security, pagination, scheduling, telemetry helpers |
321
326
  | `api-workers` | Cloudflare Workers runtime |
322
327
 
323
328
  When you complete a skill's checklist, check the boxes and add a completion timestamp at the end (e.g., `Completed: 2026-03-11`).
@@ -331,15 +336,40 @@ When you complete a skill's checklist, check the boxes and add a completion time
331
336
  | `bun run build` | Compile TypeScript |
332
337
  | `bun run rebuild` | Clean + build |
333
338
  | `bun run clean` | Remove build artifacts |
334
- | `bun run devcheck` | Lint + format + typecheck + security |
339
+ | `bun run devcheck` | Lint + format + typecheck + security + changelog sync |
340
+ | `bun run audit:refresh` | Delete `bun.lock`, reinstall, and re-run `bun audit`. Use when `devcheck` flags a transitive advisory — Bun's `update` is sticky on transitive resolutions, so the advisory may be a stale-lockfile false positive. If it survives the refresh, it's real. |
335
341
  | `bun run tree` | Generate directory structure doc |
336
342
  | `bun run format` | Auto-fix formatting |
343
+ | `bun run list-skills` | Print skill index from project `skills/` |
344
+ | `bun run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
345
+ | `bun run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
346
+ | `bun run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
337
347
  | `bun run test` | Run tests |
338
348
  | `bun run start:stdio` | Production mode (stdio) — `bun run rebuild && bun run start:stdio` for dev smoke-tests |
339
349
  | `bun run start:http` | Production mode (HTTP) — `bun run rebuild && bun run start:http` for dev smoke-tests |
340
350
 
341
351
  ---
342
352
 
353
+ ## Bundling
354
+
355
+ `bun run bundle` produces a `.mcpb` extension bundle for one-click install in Claude Desktop. MCPB is stdio-only — HTTP deployments are unaffected. Delete `manifest.json` and `.mcpbignore` to skip; `lint:packaging` skips cleanly when `manifest.json` is absent.
356
+
357
+ **Adding an env var requires both files:** `server.json` (`environmentVariables[]`) and `manifest.json` (`mcp_config.env` + `user_config`). `lint:packaging` (wired into `devcheck`) verifies alignment.
358
+
359
+ **README install badges** (Claude Desktop `.mcpb`, Cursor, VS Code) and the `base64` / `encodeURIComponent` config-generation commands are ship-time concerns — run the `polish-docs-meta` skill, which carries the badge format, layout, and generation snippets in `skills/polish-docs-meta/references/readme.md`.
360
+
361
+ ---
362
+
363
+ ## Changelog
364
+
365
+ This server uses a monolithic `CHANGELOG.md` (no `changelog/` directory). Edit it directly at each release. `bun run changelog:build` and the devcheck changelog-sync step skip cleanly when no `changelog/` directory is present.
366
+
367
+ **Section order** (Keep a Changelog): Added, Changed, Deprecated, Removed, Fixed, Security. Include only sections with entries. Open each version block with a human-readable headline.
368
+
369
+ **Tag annotations** render as GitHub Release bodies via `--notes-from-tag`. They must be structured markdown — never a flat comma-separated string. Subject omits the version number (GitHub prepends it). See `changelog/template.md` in the framework package for the full format reference.
370
+
371
+ ---
372
+
343
373
  ## Imports
344
374
 
345
375
  ```ts
@@ -359,9 +389,14 @@ import { getSocrataService } from '@/services/socrata/socrata-service.js';
359
389
  - [ ] Optional nested objects: handler guards for empty inner values from form-based clients (`if (input.obj?.field && ...)`, not just `if (input.obj)`). When regex/length constraints matter, use `z.union([z.literal(''), z.string().regex(...).describe(...)])` — literal variants are exempt from `describe-on-fields`.
360
390
  - [ ] JSDoc `@fileoverview` + `@module` on every file
361
391
  - [ ] `ctx.log` for logging, `ctx.state` for storage
362
- - [ ] Handlers throw on failure — typed `errors[]` + `ctx.fail` for declared modes, factories or `Error` for ad-hoc; no try/catch
392
+ - [ ] Handlers throw on failure — error factories or plain `Error`, no try/catch
363
393
  - [ ] `format()` renders all data the LLM needs — different clients forward different surfaces (Claude Code → `structuredContent`, Claude Desktop → `content[]`); both must carry the same data
364
- - [ ] Service-thrown errors carry contract `reason` via `data: { reason }` on factory calls when applicable
394
+ - [ ] If wrapping external API: raw/domain/output schemas reviewed against real upstream sparsity/nullability before finalizing required vs optional fields
395
+ - [ ] If wrapping external API: normalization and `format()` preserve uncertainty; do not fabricate facts from missing upstream data
396
+ - [ ] If wrapping external API: tests include at least one sparse payload case with omitted upstream fields
365
397
  - [ ] Registered in `createApp()` arrays (directly or via barrel exports)
366
398
  - [ ] Tests use `createMockContext()` from `@cyanheads/mcp-ts-core/testing`
399
+ - [ ] `.codex-plugin/plugin.json` populated — `name`, `version`, `description`, `repository`, `license` from `package.json`; `interface.displayName` = package name; `interface.shortDescription` from `package.json` description
400
+ - [ ] `.codex-plugin/mcp.json` updated — server name key matches `package.json` name; env vars added for any required API keys
401
+ - [ ] `.claude-plugin/plugin.json` populated — `name`, `version`, `description`, `repository`, `license` from `package.json`; inline `mcpServers` entry with server name key, env vars for any required API keys
367
402
  - [ ] `bun run devcheck` passes
package/README.md CHANGED
@@ -1,15 +1,21 @@
1
1
  <div align="center">
2
2
  <h1>@cyanheads/cdc-health-mcp-server</h1>
3
- <p><b>MCP server for the CDC Open Data portal. Search ~1,487 public health datasets, inspect schemas, and execute SoQL queries across disease surveillance, mortality, vaccinations, behavioral risk, and more. STDIO or Streamable HTTP.</b>
3
+ <p><b>Search and query CDC public health data — mortality, vaccinations, surveillance, behavioral risk (Socrata SODA API) via MCP. STDIO or Streamable HTTP.</b>
4
4
  <div>3 Tools • 2 Resources • 1 Prompt</div>
5
5
  </p>
6
6
  </div>
7
7
 
8
8
  <div align="center">
9
9
 
10
- [![npm](https://img.shields.io/npm/v/@cyanheads/cdc-health-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/cdc-health-mcp-server) [![Version](https://img.shields.io/badge/Version-0.6.4-blue.svg?style=flat-square)](./CHANGELOG.md) [![Framework](https://img.shields.io/badge/Built%20on-@cyanheads/mcp--ts--core-259?style=flat-square)](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/)
10
+ [![Version](https://img.shields.io/badge/Version-0.6.6-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/cdc-health-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/cdc-health-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/cdc-health-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/)
11
11
 
12
- [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/)
12
+ </div>
13
+
14
+ <div align="center">
15
+
16
+ [![Install in Claude Desktop](https://img.shields.io/badge/Install_in-Claude_Desktop-D97757?style=for-the-badge&logo=anthropic&logoColor=white)](https://github.com/cyanheads/cdc-health-mcp-server/releases/latest/download/cdc-health-mcp-server.mcpb) [![Install in Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/en/install-mcp?name=cdc-health-mcp-server&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsIkBjeWFuaGVhZHMvY2RjLWhlYWx0aC1tY3Atc2VydmVyIl19) [![Install in VS Code](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=for-the-badge&logo=visualstudiocode&logoColor=white)](https://vscode.dev/redirect?url=vscode:mcp/install?%7B%22name%22%3A%22cdc-health-mcp-server%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22%40cyanheads/cdc-health-mcp-server%22%5D%7D)
17
+
18
+ [![Framework](https://img.shields.io/badge/Built%20on-@cyanheads/mcp--ts--core-67E8F9?style=flat-square)](https://www.npmjs.com/package/@cyanheads/mcp-ts-core)
13
19
 
14
20
  </div>
15
21
 
package/dist/index.js CHANGED
@@ -16,6 +16,7 @@ await createApp({
16
16
  tools: [discoverDatasets, getDatasetSchema, queryDataset],
17
17
  resources: [datasetsResource, datasetDetailResource],
18
18
  prompts: [analyzeHealthTrend],
19
+ landing: { requireAuth: false },
19
20
  setup() {
20
21
  initSocrataService();
21
22
  },
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iEAAiE,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,sDAAsD,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAE3E,MAAM,SAAS,CAAC;IACd,YAAY,EAAE,kkBAAkkB;IAChlB,KAAK,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,CAAC;IACzD,SAAS,EAAE,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;IACpD,OAAO,EAAE,CAAC,kBAAkB,CAAC;IAC7B,KAAK;QACH,kBAAkB,EAAE,CAAC;IACvB,CAAC;CACF,CAAC,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iEAAiE,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,sDAAsD,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAE3E,MAAM,SAAS,CAAC;IACd,YAAY,EAAE,kkBAAkkB;IAChlB,KAAK,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,CAAC;IACzD,SAAS,EAAE,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;IACpD,OAAO,EAAE,CAAC,kBAAkB,CAAC;IAC7B,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;IAC/B,KAAK;QACH,kBAAkB,EAAE,CAAC;IACvB,CAAC;CACF,CAAC,CAAC"}
package/manifest.json ADDED
@@ -0,0 +1,51 @@
1
+ {
2
+ "manifest_version": "0.3",
3
+ "name": "cdc-health-mcp-server",
4
+ "version": "0.6.6",
5
+ "description": "Search and query CDC public health data — mortality, vaccinations, surveillance, behavioral risk (Socrata SODA API).",
6
+ "author": {
7
+ "name": "cyanheads"
8
+ },
9
+ "repository": {
10
+ "type": "git",
11
+ "url": "https://github.com/cyanheads/cdc-health-mcp-server"
12
+ },
13
+ "homepage": "https://github.com/cyanheads/cdc-health-mcp-server#readme",
14
+ "license": "Apache-2.0",
15
+ "server": {
16
+ "type": "node",
17
+ "entry_point": "dist/index.js",
18
+ "mcp_config": {
19
+ "command": "node",
20
+ "args": ["${__dirname}/dist/index.js"],
21
+ "env": {
22
+ "MCP_TRANSPORT_TYPE": "stdio",
23
+ "MCP_AUTH_MODE": "none",
24
+ "NODE_ENV": "production"
25
+ }
26
+ }
27
+ },
28
+ "compatibility": {
29
+ "runtimes": {
30
+ "node": ">=24.0.0"
31
+ }
32
+ },
33
+ "tools_generated": true,
34
+ "prompts_generated": true,
35
+ "user_config": {
36
+ "CDC_APP_TOKEN": {
37
+ "title": "Socrata App Token",
38
+ "type": "string",
39
+ "description": "Optional app token for higher CDC Open Data rate limits.",
40
+ "required": false,
41
+ "default": ""
42
+ },
43
+ "MCP_LOG_LEVEL": {
44
+ "title": "Log Level",
45
+ "type": "string",
46
+ "description": "Minimum log level for output (debug, info, warn, error).",
47
+ "required": false,
48
+ "default": "info"
49
+ }
50
+ }
51
+ }
package/package.json CHANGED
@@ -1,14 +1,23 @@
1
1
  {
2
2
  "name": "@cyanheads/cdc-health-mcp-server",
3
- "version": "0.6.4",
4
- "description": "MCP server for discovering and querying CDC public health datasets via the Socrata SODA API.",
3
+ "version": "0.6.6",
4
+ "description": "Search and query CDC public health data — mortality, vaccinations, surveillance, behavioral risk (Socrata SODA API) via MCP. STDIO or Streamable HTTP.",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
7
7
  "types": "dist/index.d.ts",
8
8
  "bin": {
9
9
  "cdc-health-mcp-server": "dist/index.js"
10
10
  },
11
- "files": ["dist/", "README.md", "LICENSE", "CLAUDE.md", "Dockerfile", "server.json"],
11
+ "files": [
12
+ "dist/",
13
+ "README.md",
14
+ "LICENSE",
15
+ "CLAUDE.md",
16
+ "Dockerfile",
17
+ "server.json",
18
+ "manifest.json",
19
+ ".mcpbignore"
20
+ ],
12
21
  "scripts": {
13
22
  "build": "bun scripts/build.ts",
14
23
  "rebuild": "bun scripts/clean.ts && bun scripts/build.ts",
@@ -17,6 +26,13 @@
17
26
  "tree": "bun scripts/tree.ts",
18
27
  "format": "biome check --write --unsafe .",
19
28
  "lint:mcp": "bun scripts/lint-mcp.ts",
29
+ "lint:packaging": "bun scripts/lint-packaging.ts",
30
+ "list-skills": "bun scripts/list-skills.ts",
31
+ "audit:refresh": "rm -f bun.lock && bun install && bun audit",
32
+ "bundle": "bun run build && npx -y @anthropic-ai/mcpb pack . dist/cdc-health-mcp-server.mcpb",
33
+ "publish-mcp": "mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish",
34
+ "changelog:build": "bun scripts/build-changelog.ts",
35
+ "changelog:check": "bun scripts/check-docs-sync.ts",
20
36
  "test": "vitest run",
21
37
  "start:stdio": "MCP_TRANSPORT_TYPE=stdio node dist/index.js",
22
38
  "start:http": "MCP_TRANSPORT_TYPE=http node dist/index.js"
@@ -30,7 +46,10 @@
30
46
  "public-health",
31
47
  "socrata",
32
48
  "health-data",
33
- "typescript"
49
+ "typescript",
50
+ "bun",
51
+ "stdio",
52
+ "streamable-http"
34
53
  ],
35
54
  "author": "cyanheads <casey@caseyjhand.com> (https://github.com/cyanheads/cdc-health-mcp-server#readme)",
36
55
  "funding": [
@@ -61,18 +80,19 @@
61
80
  "access": "public"
62
81
  },
63
82
  "dependencies": {
64
- "@cyanheads/mcp-ts-core": "^0.9.1",
65
- "pino-pretty": "^13.1.3"
83
+ "@cyanheads/mcp-ts-core": "^0.9.13",
84
+ "pino-pretty": "^13.1.3",
85
+ "zod": "^4.4.3"
66
86
  },
67
87
  "devDependencies": {
68
- "@biomejs/biome": "^2.4.15",
88
+ "@biomejs/biome": "^2.4.16",
69
89
  "@opentelemetry/api": "^1.9.1",
70
- "@types/node": "^25.8.0",
71
- "@vitest/coverage-istanbul": "^4.1.6",
90
+ "@types/node": "^25.9.1",
91
+ "@vitest/coverage-istanbul": "^4.1.7",
72
92
  "depcheck": "^1.4.7",
73
93
  "ignore": "^7.0.5",
74
94
  "tsc-alias": "^1.8.17",
75
95
  "typescript": "^6.0.3",
76
- "vitest": "^4.1.6"
96
+ "vitest": "^4.1.7"
77
97
  }
78
98
  }
package/server.json CHANGED
@@ -1,12 +1,12 @@
1
1
  {
2
2
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
3
3
  "name": "io.github.cyanheads/cdc-health-mcp-server",
4
- "description": "MCP server for discovering and querying CDC public health datasets via the Socrata SODA API.",
4
+ "description": "Search and query CDC public health data — mortality, vaccinations, surveillance, behavioral risk.",
5
5
  "repository": {
6
6
  "url": "https://github.com/cyanheads/cdc-health-mcp-server",
7
7
  "source": "github"
8
8
  },
9
- "version": "0.6.4",
9
+ "version": "0.6.6",
10
10
  "remotes": [
11
11
  {
12
12
  "type": "streamable-http",
@@ -19,7 +19,7 @@
19
19
  "registryBaseUrl": "https://registry.npmjs.org",
20
20
  "identifier": "@cyanheads/cdc-health-mcp-server",
21
21
  "runtimeHint": "node",
22
- "version": "0.6.4",
22
+ "version": "0.6.6",
23
23
  "packageArguments": [
24
24
  {
25
25
  "type": "positional",
@@ -54,7 +54,7 @@
54
54
  "registryBaseUrl": "https://registry.npmjs.org",
55
55
  "identifier": "@cyanheads/cdc-health-mcp-server",
56
56
  "runtimeHint": "node",
57
- "version": "0.6.4",
57
+ "version": "0.6.6",
58
58
  "packageArguments": [
59
59
  {
60
60
  "type": "positional",