Is Geolocation Mcp safe to install?

SaferSkills independently audited Geolocation Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.9 KB · Markdown

GeoLocation MCP Server

Coverage

Fast and up-to-date IP geolocation data for LLMs

demo

</details>

For public IPv4 / IPv6 address:

Flags: isDatacenter, isTorExitNode, isVPN
City name, region ISO code, latitude/longitude, accuracy radius, postal code, timezone
Country name, ISO code, EU membership/GDPR
ASN number, ISP/organization name, network CIDR

MCP tools

Tool	Description
`getGeoLocationData`	single IP lookup
`getGeoLocationDataBulk`	batch lookup, failed IPs don't block the rest

Data sources

Data	Source	Refresh
City / ASN	GeoLite2 via P3TERX/GeoLite.mmdb	on startup if absent
Tor exit nodes	Tor Project	daily
VPN / Datacenter ranges	X4BNet/lists_vpn	daily

Usage

# named volume so DBs persist across restarts
docker run -p 8891:8080 -v geolocation_data:/home/nonroot/.geolocation-mcp 7mza/geolocation-mcp:latest

or with compose

services:
  geolocation-mcp:
    image: 7mza/geolocation-mcp:latest
    ports:
      - '8891:8080'
    restart: unless-stopped
    volumes:
      - geolocation_data:/home/nonroot/.geolocation-mcp
volumes:
  geolocation_data:
    name: geolocation_data

Connect your LLM:

# example for claude
claude mcp add --transport http geolocation http://localhost:8891/mcp

Test with MCP inspector:

npm i && npm run mcp
# transport: streamable
# url: http://localhost:8891/mcp

Build from source

Requires SDKMAN and nvm.

nvm use && npm i && sdk env install

JVM:

./gradlew clean ktlintFormat ktlintCheck build
./gradlew bootRun

Native:

./gradlew clean ktlintFormat ktlintCheck build -PgenerateMetadata
./gradlew buildImage
docker run -p 8891:8080 -v geolocation_data:/home/nonroot/.geolocation-mcp 7mza/geolocation-mcp:latest

License

GeoLite2 DBs are subject to the GeoLite2 EULA.

Geolocation Mcp— agent skill

Is Geolocation Mcp safe to install?

GeoLocation MCP Server

MCP tools

Data sources

Usage

Build from source

License

Audit the pieces. Scan the whole. Decide.