Back to Browse

Sophia Commons MCP Server

Developer ToolsModerate5.6MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Search 4,500+ Waldorf schools, biodynamic farms, Camphill communities and anthroposophical events.

About

Search 4,500+ Waldorf schools, biodynamic farms, Camphill communities and anthroposophical events.

Remote endpoints: streamable-http: https://sophiacommons.org/mcp

Security Report

5.6
Moderate5.6Moderate Risk

The MCP server in automation/mcp_server.mjs is a read-only, public-data directory and events search. It uses only a publishable key through a REST API, validates and sanitizes inputs (enum-checked categories, UUID-checked ids, numeric coordinate bounds, PostgREST filter characters stripped), and never returns email or phone fields. The main caveats are its intentional lack of authentication, a wildcard CORS policy, and the truncated frontend file and unseen edge_db.mjs, which could not be fully verified. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 6 high severity).

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

database

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!