io.github.cyanheads/faostat-mcp-server
UN FAOSTAT global food & agriculture statistics over a local SQLite mirror, via MCP.
The current version, v0.4.1, was published to the official MCP registry on 2026-10-25. It is distributed as @cyanheads/faostat-mcp-server on npm and as a hosted remote over streamable-http, filed under Databases by this index, and declares 12 environment variables. Removals and unreachable sources are measured across every server this index tracks, contract drift across the servers that answer in consecutive snapshots; the index's current counts put this record in context.
Using io.github.cyanheads/faostat-mcp-server in Claude, Cursor, Gemini CLI, Cline, or Zed?
MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).
Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less
uv tool install mcpindex-gate && mcpindex-config-wireSemantic screen found no manipulation pattern in the description. Conformance probe not yet run.
mcpindex.integrity.descriptionpassINFOevidence“Tool provides FAOSTAT data via local SQLite mirror.”via static_description
- - Semantic screen only - the deterministic conformance probe has not run on this server
- - Confidence is reported but not yet calibrated (v1)
- - Screen reads the tool description, not the live behavior
- - advisory
- - registry description only no input schema
- - screen model 8b
- - The registry listing (version, packages, links) changed after this screen ran - the description we assessed did not
Semantic screen: an LLM judge reads the tool description for hidden instructions (status PARTIAL). A pass means the description is not lying, not that the tool is safe: a high-capability tool with an honest description still warrants caution. The deterministic conformance probe has not been run on this server yet, so the screen here is semantic-only. Posture: advisory. Confidences are reported but not yet calibrated (calibrated=false at v1). Full verdict history is not shown on this page.
Own this server? Test a description on the public screen → It is a separate check from the verdict above, so the two can differ.
That verdict was true at screening time (snapshot 2026-10-27).
Contracts can change after screening, with no version bump. The gate pins io.github.cyanheads/faostat-mcp-server’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.
See your first HOLD in 2 minutes →
Related: how to trust an MCP server · screen before install · silent contract drift
6 changes with a version change.
Part of a publisher-wide change of the same kind on 2026-10-19, seen on 13 servers from this publisher.
Part of a publisher-wide change of the same kind on 2026-08-26, seen on 32 servers from this publisher.
Observed by mcpindex’s crawler between daily registry snapshots - a contract diff, not a safety verdict, and not an in-path prevention (that is the gate). A “safety-relevant diff” touches a safety-relevant field; it is not a confirmed vulnerability. Shown at the server level; individual tools are not named. Absence is not a clean bill of health: only public-registry servers are crawled.
People vet a server before wiring it in. One line on your project site or docs answers that with an independent record: screening verdict, registry provenance, contract drift history. It stays current as new screens and drift events land.
[Independent trust record for io.github.cyanheads/faostat-mcp-server](https://mcpindex.ai/server/io-github-cyanheads-faostat-mcp-server) - screening verdict, registry provenance, and contract drift monitoring.<a href="https://mcpindex.ai/server/io-github-cyanheads-faostat-mcp-server">Independent trust record for io.github.cyanheads/faostat-mcp-server</a> - screening verdict, registry provenance, and contract drift monitoring.A live verdict badge for your README or listing. It reflects the current screen, links back here, and updates when the verdict does.
[](https://mcpindex.ai/server/io-github-cyanheads-faostat-mcp-server)<a href="https://mcpindex.ai/server/io-github-cyanheads-faostat-mcp-server"><img src="https://mcpindex.ai/api/v1/badge/io-github-cyanheads-faostat-mcp-server" alt="mcpindex verdict" height="20" /></a>FAOSTAT_DOMAINSComma-separated FAOSTAT domain codes to index into the local mirror.
FAOSTAT_MIRROR_PATHDirectory holding the per-domain SQLite mirror databases and the shared dimension database.
FAOSTAT_BULK_BASE_URLFAOSTAT bulk-download service base URL (manifest + per-domain ZIPs).
CANVAS_PROVIDER_TYPEDataCanvas engine for SQL over large result sets. Defaults to 'duckdb'; set 'none' to disable analytical staging.
FAOSTAT_DATAFRAME_DROP_ENABLEDSet to 'true' to make faostat_dataframe_drop callable, so a staged table can be dropped before its 2-hour TTL. Off by default: the tool is registered disabled.
MCP_LOG_LEVELSets the minimum log level for output (e.g., 'debug', 'info', 'warn').
MCP_TRANSPORT_TYPESelects the HTTP transport.
MCP_HTTP_HOSTThe hostname for the HTTP server.
MCP_HTTP_PORTThe port to run the HTTP server on.
MCP_HTTP_ENDPOINT_PATHThe endpoint path for the MCP server.
MCP_AUTH_MODEAuthentication mode to use: 'none', 'jwt', or 'oauth'.
FAOSTAT_DOMAINSComma-separated FAOSTAT domain codes to index into the local mirror.
FAOSTAT_MIRROR_PATHDirectory holding the per-domain SQLite mirror databases and the shared dimension database.
FAOSTAT_BULK_BASE_URLFAOSTAT bulk-download service base URL (manifest + per-domain ZIPs).
FAOSTAT_REFRESH_CRONCron expression for the in-process incremental mirror refresh (HTTP transport only). Omit to disable.
CANVAS_PROVIDER_TYPEDataCanvas engine for SQL over large result sets. Defaults to 'duckdb'; set 'none' to disable analytical staging.
FAOSTAT_DATAFRAME_DROP_ENABLEDSet to 'true' to make faostat_dataframe_drop callable, so a staged table can be dropped before its 2-hour TTL. Off by default: the tool is registered disabled.
MCP_LOG_LEVELSets the minimum log level for output (e.g., 'debug', 'info', 'warn').
Give your agent its own cloud: Postgres, Redis, a sandbox or any Docker image, in one MCP call.
Managed Postgres MCP: projects, SQL, docs search, and storage buckets via OAuth.
Database admin MCP: schema inspection, query optimization for PostgreSQL and MySQL