Mcp Belgium — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Belgium (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
One MCP server for Belgian public APIs.
mcp-belgium is the public entry point. It exposes a single aggregated MCP server that bundles Belgian transport, official statistics, open data, addresses, weather, air quality, and geospatial services behind one install and one client config entry.
The package is also prepared for publication to the official MCP Registry under io.github.lacausecrypto/mcp-belgium.
irail_*, statbel_*, best_*, kmi_*, urban_*, and urbis_*Run directly:
npx -y mcp-belgiumWith pnpm:
pnpm dlx mcp-belgiumGlobal install:
pnpm add -g mcp-belgium
mcp-belgiumDefault transport is stdio, which is what desktop MCP clients expect.
{
"mcpServers": {
"belgium": {
"command": "npx",
"args": [
"-y",
"mcp-belgium"
],
"env": {
"LOG_LEVEL": "silent"
}
}
}
}Optional env vars:
STIB_API_KEY: enables live STIB/MIVB toolsCBEAPI_KEY: enables live KBO/BCE company registry toolsMCP_TRANSPORT=http: runs the server over Streamable HTTPPORT_BELGIUM=3017: sets the HTTP port for the aggregated serverAlongside the domain tools, mcp-belgium exposes a discovery layer:
belgium_catalog_overviewbelgium_list_domainsbelgium_describe_domainbelgium://catalogbelgium://catalog.jsonbelgium://domain/{domain}belgium_capability_guideThat means the LLM can:
| Prefix | Domain | Status | Auth | Main data |
|---|---|---|---|---|
irail_* | Belgian rail / iRail | Live | None | stations, connections, liveboards, vehicles, disruptions |
mobility_* | Belgian mobility / SMOP | Live | None | intermodal trip planning, operators, GTFS references |
stib_* | STIB/MIVB Brussels transit | Live | API key | waiting times, stops, routes, service messages |
infrabel_* | Infrabel Open Data | Live | None | rail infrastructure datasets and records |
kbo_* | Belgian company registry | Live | API key | enterprise search and company details |
best_* | BeST Belgian addresses | Live | None | addresses, municipalities, streets, postal infos |
statbel_* | Statbel | Live | None | population, CPI, employment, dataset search |
airquality_* | IRCELINE air quality | Live | None | stations, live measurements, BelAQI, timeseries |
brussels_* | Brussels Region open data | Live | None | datasets and records |
wallonia_* | Wallonia open data | Live | None | datasets and records |
kmi_* | KMI / IRM GeoServer | Live | None | stations, hourly observations, WFS discovery |
wallonia_geo_* | Wallonia GeoServices | Live | None | ArcGIS folders, services, layer queries |
urban_* | urban.brussels WFS | Live | None | feature types, schemas, GeoJSON features |
urbis_* | URBIS public WMS | Live | None | WMS layer discovery and map URL generation |
datagov_* | data.gov.be compatibility layer | Limited | None | explicit upstream-changed error surface |
flanders_* | Datavindplaats compatibility layer | Limited | API key | explicit upstream limitation surface |
The repo now includes a docs/ tree that works as a lightweight public wiki:
Requirements:
Setup:
pnpm install
pnpm run build
pnpm run test
pnpm run typecheckRun the aggregated server over stdio:
pnpm --filter mcp-belgium start:stdioRun it over Streamable HTTP:
MCP_TRANSPORT=http PORT_BELGIUM=3017 pnpm --filter mcp-belgium startRun the whole workspace:
docker compose up --buildpackages/core: shared HTTP, retry, cache, rate limiting, XML helpers, and MCP response helperspackages/mcp-belgium: public aggregated entry pointpackages/mcp-*: domain-specific packages kept modular for maintenance, testing, and isolated validationThe public consumer path is mcp-belgium. Internal workspace packages stay modular for development, but the published mcp-belgium package bundles them so end users install only one npm package.
This project wraps public upstream APIs. Some Belgian portals change authentication or endpoint contracts over time. When an upstream is no longer publicly compatible, this project prefers explicit, machine-readable limitation errors over silent failure.
Current examples:
mcp-stib requires STIB_API_KEYmcp-kbo requires CBEAPI_KEYmcp-data-gov-be preserves the old tool contract but returns an explicit upstream-changed errormcp-opendata-flanders preserves the old tool contract but returns an explicit API-key limitationCurrent workspace checks:
pnpm run buildpnpm run testpnpm run typecheckpnpm audit --prodMIT. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.