Back to Browse

Care Home Cqc MCP Server

Developer ToolsUse Caution3.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

UK Care Quality Commission (CQC) Single Assessment Framework compliance for care homes. AI-assisted

About

UK Care Quality Commission (CQC) Single Assessment Framework compliance for care homes. AI-assisted

Security Report

3.2
Use Caution3.2High Risk

The MCP server implements basic rate-limiting and an API key authentication mechanism, but has several security concerns that warrant attention. The server reads environment variables for authentication and makes unauthenticated HTTP calls to an external verification endpoint without strict error handling. Input validation is minimal, and the monetization/upsell layer introduces unnecessary complexity. While the server's stated purpose (CQC compliance checking) aligns with its permissions, the authentication implementation allows unauthenticated access to all tools via a permissive default fallback, and the external verification endpoint creates a dependency that could be exploited. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-csoai-org-care-home-cqc-mcp": {
      "args": [
        "care-home-cqc-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!