Server data from the Official MCP Registry
Local-first reusable implementation registry for AI agents and versioned widgets.
Local-first reusable implementation registry for AI agents and versioned widgets.
This MCP server is well-designed with appropriate input validation, proper command building, and clear security boundaries. The server acts as a thin wrapper around the cartograph-cli tool with intentionally limited surface area. No credential handling, data exfiltration, or code execution vulnerabilities were found. Permissions are appropriate for the stated purpose of widget management and configuration. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 8 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-benteigland11-cartograph": {
"args": [
"cartograph-mcp"
],
"command": "uvx"
}
}
}From the project's GitHub README.
mcp-name: io.github.benteigland11/cartograph
An MCP server for Cartograph that exposes the daily widget workflow for agents without mirroring the entire CLI. Search, inspect, install, create, validate, check in, and configure Cartograph defaults through a compact agent-facing surface, then fall back to the CLI for the full administrative and recovery surface.
The Cartograph CLI is the source of truth, but agents do better when the common path is small and explicit.
This MCP keeps the top-level tool surface focused on daily driving:
Everything else stays in the CLI. That keeps the MCP easier to teach, easier to test, and less likely to drift into a second full interface.
pip install cartograph-mcp
Claude Desktop example:
{
"mcpServers": {
"cartograph": {
"command": "cartograph-mcp"
}
}
}
The package depends on cartograph-cli and shells out to it as the source of truth for the full command surface.
Common CLI setup commands:
# Claude Code
claude mcp add cartograph --scope user -- cartograph-mcp
# Codex
codex mcp add cartograph -- cartograph-mcp
# Gemini CLI
gemini mcp add cartograph cartograph-mcp
# Cursor
cursor --add-mcp '{"name":"cartograph","command":"cartograph-mcp"}'
Claude Code expects an explicit scope flag such as --scope user.
The MCP intentionally exposes a small workflow-oriented surface:
registry_widget
Actions: search, inspect, install, rateinstalled_widget
Actions: upgrade, uninstallwidget_statuscreate_widgetvalidate_widgetcheckin_widgetcartograph_configcartograph_rulesThese are not a 1:1 mirror of the CLI. They are grouped around agent intent:
1. Search the registry before writing logic.
2. Inspect the widget you want to reuse.
3. Install it into the project.
4. If no existing widget fits, create one.
5. Validate it with the full dry-run pipeline.
6. Check it in with a reason once it is ready.
In Cartograph terms:
registry_widget handles discovery and installinstalled_widget handles already-installed widget paths like cg/backend_retry_pythonvalidate_widget is the dry run for checkin_widgetcartograph_config manages the defaults that change how your day-to-day loop behavescartograph_rules manages custom rules that run during validate and checkinThis MCP is deliberately not the whole CLI.
The common path belongs in MCP. The official full surface belongs in cartograph.
For uncommon, administrative, or recovery operations, use:
cartograph --help
cartograph <command> --help
That includes things like rollback/delete, cloud operations, auth, setup, rules, doctor, export/import, and other non-daily commands.
cartograph_config exposes the workflow defaults that matter most to agents:
auto-publishvisibilitygovernancecloudshow-unavailablepublish-registryReading and writing config is done through the CLI's --json path so MCP can consume it safely.
This package is tested in two layers:
The integration suite isolates:
HOMEXDG_CONFIG_HOMEXDG_DATA_HOMEXDG_CACHE_HOMEWIDGET_LIBRARY_PATHThat means validate/checkin/install flows are exercised without touching the real widget library or user config on the machine running tests.
pip install -e .
pytest -q
The repo includes:
ci.yml for normal test/build validation on pushes and pull requestspypi-publish.yml for automated release publishing after a successful version-bump CI runFor the full product story and complete CLI surface, see Cartograph.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
by mcp-marketplace · Developer Tools
Scaffold, build, and publish TypeScript MCP servers to npm — conversationally
by mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.