.codex-plugin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .codex-plugin (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center"> <h1>@cyanheads/wikipedia-mcp-server</h1> <p><b>Search Wikipedia articles, read summaries and full text, target sections, find nearby pages, and list language editions via MCP. STDIO or Streamable HTTP.</b> <div>6 Tools</div> </p> </div>
<div align="center">
</div>
<div align="center">
</div>
Six tools for working with Wikipedia across all language editions:
| Tool | Description |
|---|---|
wikipedia_search | Full-text search across Wikipedia, returning ranked results with plain-text snippets and page IDs. |
wikipedia_get_summary | Lead-section summary for any article — plain text, Wikidata QID, description, thumbnail URL, and page type. |
wikipedia_get_article | Full article or a targeted section as clean plain text, with section markers preserved. |
wikipedia_get_sections | Table of contents with section_index values for targeted section reads. |
wikipedia_search_nearby | Geotagged Wikipedia articles within a radius of a WGS 84 coordinate, sorted by distance. |
wikipedia_get_languages | All language editions available for an article, with titles and URLs. |
wikipedia_searchSearch Wikipedia articles by full-text query.
language parameterwikipedia_get_summaryFetch the lead-section summary for a Wikipedia article.
page_type: "disambiguation" — a signal to follow up with wikipedia_search using a more specific querywikipedia_get_articleFetch article content as clean plain text.
section_index: returns the full article (40–100 KB for major articles) with == Section == markerssection_index (from wikipedia_get_sections): returns just that section (1–10 KB)wtf_wikipediawikipedia_get_sectionsFetch the table of contents for a Wikipedia article.
section_index valuessection_index is the integer to pass to wikipedia_get_article for targeted readswikipedia_get_article when only a specific section is neededwikipedia_search_nearbyFind Wikipedia articles about places near a geographic coordinate.
wikipedia_get_languagesList language editions available for a Wikipedia article.
Built on @cyanheads/mcp-ts-core:
none, jwt, oauthin-memory, filesystem, Supabase, Cloudflare KV/R2/D1Wikipedia-specific:
/api/rest_v1/) for summaries, Action API (/w/api.php) for search, full text, sections, geo search, and language linksUser-Agent header per Wikimedia API policywtf_wikipedia — handles links, templates, refs, bold/italic; re-injects section headings for structurelanguage parameter on every tool — all Wikipedia language editions accessible in a single sessionAgent-friendly output:
page_type field on summaries discriminates article / disambiguation / redirect — no string parsing neededwikibase_item (Wikidata QID) on summaries enables direct cross-referencing with wikidata-mcp-serversection_index on table-of-contents entries links directly to the targeted-read parameter on wikipedia_get_articlewikipedia_search to find the correct title")Add the following to your MCP client configuration file.
{
"mcpServers": {
"wikipedia-mcp-server": {
"type": "stdio",
"command": "bunx",
"args": ["@cyanheads/wikipedia-mcp-server@latest"],
"env": {
"MCP_TRANSPORT_TYPE": "stdio",
"MCP_LOG_LEVEL": "info"
}
}
}
}Or with npx (no Bun required):
{
"mcpServers": {
"wikipedia-mcp-server": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@cyanheads/wikipedia-mcp-server@latest"],
"env": {
"MCP_TRANSPORT_TYPE": "stdio",
"MCP_LOG_LEVEL": "info"
}
}
}
}Or with Docker:
{
"mcpServers": {
"wikipedia-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"run", "-i", "--rm",
"-e", "MCP_TRANSPORT_TYPE=stdio",
"ghcr.io/cyanheads/wikipedia-mcp-server:latest"
]
}
}
}For Streamable HTTP, set the transport and start the server:
MCP_TRANSPORT_TYPE=http MCP_HTTP_PORT=3010 bun run start:http
# Server listens at http://localhost:3010/mcpgit clone https://github.com/cyanheads/wikipedia-mcp-server.gitcd wikipedia-mcp-serverbun installcp .env.example .env
# edit .env if you want to customize WIKIPEDIA_USER_AGENT or logging| Variable | Description | Default |
|---|---|---|
WIKIPEDIA_USER_AGENT | User-Agent header sent with every Wikimedia API request. Customize for your deployment. | wikipedia-mcp-server/0.1.10 (https://github.com/cyanheads/wikipedia-mcp-server) |
WIKIPEDIA_BASE_URL | Base Wikipedia URL. Language selection is per-call — not a global language setting. | https://en.wikipedia.org |
MCP_TRANSPORT_TYPE | Transport: stdio or http. | stdio |
MCP_HTTP_PORT | Port for HTTP server. | 3010 |
MCP_AUTH_MODE | Auth mode: none, jwt, or oauth. | none |
MCP_LOG_LEVEL | Log level (RFC 5424). | info |
LOGS_DIR | Directory for log files (Node.js only). | <project-root>/logs |
OTEL_ENABLED | Enable OpenTelemetry instrumentation (spans, metrics, completion logs). | false |
See .env.example for the full list of optional overrides.
# One-time build
bun run rebuild
# Run the built server
bun run start:stdio
# or
bun run start:http bun run devcheck # Lint, format, typecheck, security
bun run test # Vitest test suite
bun run lint:mcp # Validate MCP definitions against specdocker build -t wikipedia-mcp-server .
docker run --rm -p 3010:3010 wikipedia-mcp-serverThe Dockerfile defaults to HTTP transport, stateless session mode, and logs to /var/log/wikipedia-mcp-server. OpenTelemetry peer dependencies are installed by default — build with --build-arg OTEL_ENABLED=false to omit them.
| Directory | Purpose |
|---|---|
src/index.ts | createApp() entry point — registers tools and inits the Wikipedia service. |
src/config | Server-specific environment variable parsing and validation with Zod. |
src/mcp-server/tools | Tool definitions (*.tool.ts) — one file per tool. |
src/services/wikipedia | WikipediaService — REST API + Action API client with retry/backoff and language validation. |
tests/ | Unit and integration tests mirroring src/. |
See CLAUDE.md for development guidelines and architectural rules. The short version:
try/catch in tool logicctx.log for request-scoped logging, ctx.state for tenant-scoped storagesrc/mcp-server/tools/definitions/index.tsIssues and pull requests are welcome. Run checks and tests before submitting:
bun run devcheck
bun run testApache-2.0 — see LICENSE for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.