Loading…
US ZIP code intelligence: demographics, weather, tax rates, crime statistics, housing data, and voting patterns.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 7 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The ZipExplore MCP server exposes 22 tools, focused primarily on general-purpose capabilities. Its published description reads: "US ZIP code intelligence: demographics, weather, tax rates, crime statistics, housing data, and voting patterns". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates ZipExplore F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check ZipExplore's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add ZipExplore to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.zipexplore.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Returns the full prose of a specific ZipExplore research article. Use this for editing, fact-checking, detailed analysis, or when get_research summaries aren't enough. Valid slugs: disappearing-towns,
Returns server status and tool/resource counts. Use this to verify the ZipExplore MCP connection is live.
Returns ZipExplore's data interpretation guide: reasoning guardrails (associations vs. causes, small-ZIP noise, averages hiding distributions, editorial score weights, drawing conclusions about people
Returns ZipExplore's published research articles — original data findings on topics including disaster risk vs. housing costs (the Hazard Premium), food insecurity in fully-employed communities (SNAP
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: get_article
A tool description tries to alter the model’s use of another tool.
alysis, or when get_research summaries aren't enough. Valid slugs: disappearRecommendationDescriptions must describe only their own tool.
tool: search_zips
A tool description tries to alter the model’s use of another tool.
Denver"). Call get_search_fields first if you're unsure what field namesRecommendationDescriptions must describe only their own tool.
tool: compare_zips
A tool description tries to alter the model’s use of another tool.
shape as get_zip_profile for each ZIP.RecommendationDescriptions must describe only their own tool.
tool: get_search_fields
A tool description tries to alter the model’s use of another tool.
pass to search_zips, or when the user asks what data ZipExplore hasRecommendationDescriptions must describe only their own tool.
tool: get_census_profile
A tool description tries to alter the model’s use of another tool.
se when get_zip_profile's demographics section isn't sufficient depth.RecommendationDescriptions must describe only their own tool.
tool: get_weather_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's climate section isn't sufficient deptRecommendationDescriptions must describe only their own tool.
tool: get_tax_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's tax section isn't sufficient depth. IRecommendationDescriptions must describe only their own tool.
tool: get_crime_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's crime section isn't sufficient depth.RecommendationDescriptions must describe only their own tool.
tool: get_cost_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's cost section isn't sufficient depth.RecommendationDescriptions must describe only their own tool.
tool: get_voting_profile
A tool description tries to alter the model’s use of another tool.
se when get_zip_profile's voting section isn't sufficient depth. IncludRecommendationDescriptions must describe only their own tool.
tool: get_education_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's education section isn't sufficient deRecommendationDescriptions must describe only their own tool.
tool: get_healthcare_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's healthcare section isn't sufficient dRecommendationDescriptions must describe only their own tool.
tool: get_business_profile
A tool description tries to alter the model’s use of another tool.
se when get_zip_profile's business section isn't sufficient depth. InclRecommendationDescriptions must describe only their own tool.
tool: get_air_quality_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's air quality section isn't sufficientRecommendationDescriptions must describe only their own tool.
tool: get_disaster_risk_profile
A tool description tries to alter the model’s use of another tool.
se when get_zip_profile's disaster risk section isn't sufficient depth.RecommendationDescriptions must describe only their own tool.
tool: get_transit_profile
A tool description tries to alter the model’s use of another tool.
code. Use when get_zip_profile's transit section isn't sufficient deptRecommendationDescriptions must describe only their own tool.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
sit. Start with search_zips to find ZIPs matching criteria, get_zip_profileRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: get_zip_centroids
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "get_zip_centroids"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Find ZIP codes matching one or more criteria. Returns a ranked list with scores. Use this first when the user wants recommendations (e.g. "find a low-crime suburb near Denver"). Call get_search_fields
Full location profile for one ZIP code across all 12 data domains: demographics, climate, tax, crime, cost of living, voting, education, healthcare, business, air quality, disaster risk, and transit.
Side-by-side full profiles for 2–5 ZIP codes. Use when the user has finalists and needs to choose between them. Returns the same profile shape as get_zip_profile for each ZIP.
Lists every field name, type, and description available for search criteria. Call this when you're unsure what field names to pass to search_zips, or when the user asks what data ZipExplore has.
Detailed Census / demographics data for one ZIP code. Use when get_zip_profile's demographics section isn't sufficient depth. Includes population, housing, income distribution, education attainment, e
Convert a latitude/longitude coordinate to a ZIP code. Use when the user provides an address or map coordinates rather than a ZIP code.
Get the latitude/longitude centroid for one or more ZIP codes (max 200). Use when you need map coordinates for a set of ZIPs.
Detailed climate data for one ZIP code. Use when get_zip_profile's climate section isn't sufficient depth. Includes annual/monthly temperature averages, precipitation, humidity, and nearest weather st
Detailed tax data for one ZIP code. Use when get_zip_profile's tax section isn't sufficient depth. Includes state income tax, sales tax, property tax effective rates, excise taxes, and IRS income stat
Detailed crime data for one ZIP code. Use when get_zip_profile's crime section isn't sufficient depth. Includes violent crime rate, property crime rate, and data quality flags (coverage level, Bayesia
Detailed cost of living data for one ZIP code. Use when get_zip_profile's cost section isn't sufficient depth. Includes fair market rents, housing cost burden, regional price indices, and affordabilit
Detailed voting and political data for one ZIP code. Use when get_zip_profile's voting section isn't sufficient depth. Includes presidential election results, partisan lean, congressional and state le
Detailed school data for one ZIP code. Use when get_zip_profile's education section isn't sufficient depth. Includes school counts, student-teacher ratios, graduation rates, per-pupil spending, Title
Detailed healthcare data for one ZIP code. Use when get_zip_profile's healthcare section isn't sufficient depth. Includes hospital count and ratings, nursing homes, beds per capita, primary care and m
Detailed business and employment data for one ZIP code. Use when get_zip_profile's business section isn't sufficient depth. Includes top industries, sector breakdowns, total establishments, employment
Detailed air quality data for one ZIP code. Use when get_zip_profile's air quality section isn't sufficient depth. Includes EPA AQS pollutant levels (PM2.5, PM10, ozone, NO2, SO2, CO) and AQI summary.
Detailed natural disaster risk data for one ZIP code. Use when get_zip_profile's disaster risk section isn't sufficient depth. Includes FEMA NRI overall risk score, individual hazard scores (hurricane
Detailed public transit data for one ZIP code. Use when get_zip_profile's transit section isn't sufficient depth. Includes bus stop count, subway station count, rail station count, light rail count, f