io.github.cyanheads/openstreetmap-mcp-server
io.github.cyanheads/openstreetmap-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/d1f527fa-de95-485e-93ff-3069fb968219/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/openstreetmap-mcp-server"
title: null
description: "Geocode, reverse geocode, and run Overpass spatial queries on OpenStreetMap data."
version: "0.7.2"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/openstreetmap-mcp-server"
provider: "github"
owner: "cyanheads"
name: "openstreetmap-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/openstreetmap-mcp-server"
version: "0.7.2"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/openstreetmap-mcp-server"
version: "0.7.2"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://openstreetmap.caseyjhand.com/mcp"
endpoint_host: "openstreetmap.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[6]
0{9}
name: "openstreetmap_lookup_objects"
title: "Look up address details for OSM objects by ID"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.875
risk_severity: "LOW"
fingerprint: "04c1f598401efe69a28d8c729dc02b5347dafc185bad276ae21a23d5a33d4b75"
input_schema_fingerprint: "69a269c558f96efe5af54f6b570f1047991f9b8ac1a74439a527d53a589beeea"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "openstreetmap_query_bbox"
title: "Find OSM features inside a bounding box or an OSM boundary"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "7d915ba70444e42228b940108c5191eba50c7696c879f9568ae18d282a34ebc4"
input_schema_fingerprint: "23b3a9edc1dfde57971d345ad3c4faf7623a81e7f348336c2b23e54c33eb5a90"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "openstreetmap_query_nearby"
title: "Find OSM features near a point"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.953
risk_severity: "LOW"
fingerprint: "35a5560b7ed4df3a5e6176918f77551affe21f677c94f2a71c50b53b38b37907"
input_schema_fingerprint: "272cf833fcc45569d514ebbbf047c425e45aebb50cafb29f40f599f78bf8a356"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "openstreetmap_query_raw"
title: "Execute a raw Overpass QL query"
effect: "EXECUTE"
effect_confidence: 0.67
capabilities[2]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.586
1{2}
capability: "LOCATION"
confidence: 0.617
risk_severity: "HIGH"
fingerprint: "dc7b405c0ed874b52177acf031bdb74f4cdc21cebeb5e95ed2dc348d9da0697a"
input_schema_fingerprint: "5e35e49eca8bd0fede157a34906b28190c3c5c00684d433671e667cc2b51169e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
4{9}
name: "openstreetmap_reverse_geocode"
title: "Reverse geocode coordinates to an address"
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.99
risk_severity: "LOW"
fingerprint: "7c71399accb1e990822806aa8e84d78f5580def64b5e8d097e993268a8391751"
input_schema_fingerprint: "dbdd0f5edf468b32d18c2d8040168e97fcd725d08c8ce5b1c412be7a79728bf2"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "openstreetmap_search_places"
title: "Geocode a place name or address"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.99
1{2}
capability: "PERSONAL_DATA"
confidence: 0.903
risk_severity: "LOW"
fingerprint: "6d6fac7fbf93a51a10005d822696bc77ff7e0fc806cd4688ca5f7b4daea02ad6"
input_schema_fingerprint: "c96b51c0e9f62b36b5c134ee20d391f0bd3ad18f4484018ca613617c3360bb20"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[2]
0{4}
key: "skill://openstreetmap-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "2a27c9c328e91ddb099873b3d56ed3b57578fedeca7cdc24ccb6da82ea18b7b4"
1{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "openstreetmap.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[4]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "openstreetmap_query_raw"
2{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "openstreetmap_search_places"
3{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "openstreetmap_search_places"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/openstreetmap-mcp-server"
registry_content_sha256: "6ddd5b4fe4f28e1e38fa1569f46aa5aed640dff1180570366b69288ac415c055"
scan_snapshot_fingerprint: "19ab58840f88e1609576298266eea5d5e5f0cffbeaf3f6dbc167a37bcebf497a"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:12.239Z"
observed_at: "2026-11-11T17:40:33.081+00:00"
registry_published_at: "2026-11-11T16:24:37.677271+00:00"
registry_updated_at: null