How do I install Statcan?

Statcan is a local plugin. Install it using PyPI package: statcan-mcp-server and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Statcan safe to use?

Statcan scored 6.2/10 (moderate risk) in MCP Marketplace's automated security scan. It has 2 high or critical findings to review. It's listed, but review the security report on this page before installing.

What AI apps work with Statcan?

Statcan uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Statcan MCP Server

by Aryan-Jhaveri

Developer ToolsModerate6.2Local

Free

Access Statistics Canada data via the Web Data Services API

About

Access Statistics Canada data via the Web Data Services API

Security Report

6.2

Moderate6.2Moderate Risk

This Statistics Canada MCP server is well-structured and primarily focused on read-only data retrieval from public APIs. The main concerns are disabled SSL verification across all API calls, which is documented but represents a security deviation, and some logging patterns that could expose sensitive request details. The server has appropriate input validation, no obvious malicious patterns, and permissions align well with its stated purpose (HTTP network access for API calls, file I/O for caching/CLI output, env vars for configuration). The disabled SSL verification is the primary driver of the moderate risk level. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-aryan-jhaveri-mcp-statcan": {
      "args": [
        "statcan-mcp-server"
      ],
      "command": "uvx"
    }
  }
}