Registries mcp.so UUnhcr Data PortalA custom-built MCP (Model Context Protocol) server designed to streamline data access from data.unhcr.org. This server efficiently pulls structured humanitarian data from UNHCR’s public platform, enabling real-time integration with local systems, dashboards, and analytics pipelines. Hosted securely on mscp.so, it ensures reliable performance, optimized data throughput, and easy scalability for humanitarian applications. Key Features: Automated data extraction from UNHCR's open datasets Custom endpoint handling and transformation JSON/CSV-ready output for downstream use Secure, lightweight, and scalable architecture Real-time and scheduled pull options Use Cases: ✓ Humanitarian needs analysis ✓ Refugee response dashboards ✓ Donor and partner reporting ✓ Integration with local WMS or data lakes

UUnhcr Data PortalA custom-built MCP (Model Context Protocol) server designed to streamline data access from data.unhcr.org. This server efficiently pulls structured humanitarian data from UNHCR’s public platform, enabling real-time integration with local systems, dashboards, and analytics pipelines. Hosted securely on mscp.so, it ensures reliable performance, optimized data throughput, and easy scalability for humanitarian applications. Key Features: Automated data extraction from UNHCR's open datasets Custom endpoint handling and transformation JSON/CSV-ready output for downstream use Secure, lightweight, and scalable architecture Real-time and scheduled pull options Use Cases: ✓ Humanitarian needs analysis ✓ Refugee response dashboards ✓ Donor and partner reporting ✓ Integration with local WMS or data lakes

mcp-so:unhcr-data-portal_Shahzad ASGHAR

View source

92/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

Score

92/100

MEDIUM 1

LOW 1

Findings (2)

MEDIUM

Auto-confirm flag bypassing user verification MCPCFG_008

mcp-config L51

Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation

"-y"

FIX

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

FP?

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.

LOW

npx MCP server without version pin MCPCFG_001

mcp-config L49

Detects MCP server configs using npx to run packages without version pinning

"command": "npx"

FIX

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

FP?

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.