Back to Home
seb999 icon

EEA_sdi_mcp

Verified Safe

by seb999

Overview

Interacting with the European Environment Agency (EEA) GeoNetwork Catalogue API for metadata search, discovery, export, and management.

Installation

Run Command
npm start

Environment Variables

  • PORT
  • BASE_URL
  • MAX_SEARCH_RESULTS
  • CATALOGUE_USERNAME
  • CATALOGUE_PASSWORD
  • RATE_LIMIT_WINDOW_MS
  • RATE_LIMIT_MAX_REQUESTS
  • UPLOAD_DIR
  • MAX_FILE_SIZE

Security Notes

The server correctly uses environment variables for sensitive API credentials (CATALOGUE_USERNAME, CATALOGUE_PASSWORD). Rate limiting is implemented using 'express-rate-limit' to prevent abuse. File uploads are handled by 'multer' with a configurable MAX_FILE_SIZE. Crucially, the serving of uploaded files includes robust directory traversal protection using 'path.resolve'. The CORS configuration with 'origin: true' is highly permissive; while common for flexible API clients, it means any origin can make requests, potentially requiring the upstream GeoNetwork API to have its own origin validation for sensitive operations. No instances of 'eval' or other obvious malicious patterns were found in the provided code.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens5000
Stars0
Forks0
Last Update2025-12-04

Tags

GeoNetworkMCPMetadataAPIEnvironmental Data