Mcp Congress — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Congress (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
US federal bills (House and Senate), enacted public/private laws, and members of Congress, served from the Library of Congress's official congress.gov API, plus a full-text keyword search over the GPO's GovInfo index of the same bill documents. Bill status, sponsors, enacted laws, member rosters. Requires a free api.data.gov key.
Part of Pipeworx — an MCP gateway connecting AI agents to 1856+ live data sources. This is an independent, unofficial integration — not affiliated with, endorsed by, or published by the upstream provider.
For policy research, agents need to know what bills exist, who's sponsoring them, where they are in the legislative process, and which laws have actually been enacted. Congress.gov is the canonical record. Pair with Federal Register (rules implementing legislation) and USAspending (where the money goes after authorization).
Common flows:
get_public_laws.get_members.Requires an API key. A free api.data.gov key (https://api.data.gov/signup/) authenticates every tool in this pack — the same key works for congress.gov and GovInfo both. Called through the Pipeworx gateway this is supplied automatically; called directly, pass it as _apiKey.
This pack used to call GovTrack's public API. GovTrack now answers every endpoint it has — bills, members, votes — with a Cloudflare bot-challenge page served as HTTP 403, so every tool that relied on it failed on every call. search_bills, get_bill, get_recent_bills and get_members now call the official sources instead (congress.gov, plus GovInfo for search_bills's keyword search — see below). get_votes now serves the House from congress.gov and the Senate from the Congressional Record (see "Roll-call votes" below) — it briefly refused outright between #3164 and #3183 because congress.gov's roll-call endpoint is House-only.
search_bills)congress.gov's own bill listing has no free-text search parameter at all — it only browses/filters by Congress, type and date. The GPO's GovInfo index of the same bill documents (what congress.gov's own search box is built on) does support a keyword query, so search_bills searches there and re-ranks the results locally:
match (exact / phrase / all_words / partial / none) and matched_title.get_public_laws) — newGovTrack never had an endpoint for enacted laws. congress.gov does: pass a Congress number (and optionally law_type: "priv" for private laws) to get the count, the most recent law, and the list — newest first.
committee_leadership, committee_members)Baked from a SEPARATE public-domain source (github.com/unitedstates/congress-legislators) — neither congress.gov nor GovTrack has a committee-membership or committee-leadership endpoint at all. data_as_of on every response is that source's own last-update date.
committee_members identifies a committee OR a subcommittee by committee_id (exact) or by name. Name search (fleet #3203, 2026-10-16) looks at SUBCOMMITTEE names too, not just the ~230 top-level committees — "Cybersecurity" alone finds the Senate Armed Services Subcommittee on Cybersecurity (SSAS21) directly, and so does the fuller "Senate Armed Services Subcommittee on Cybersecurity" (disambiguating it from House Armed Services' own Cyber-named subcommittee). Matching is word-token (every query word must appear in, or be a prefix/suffix of, a candidate word) and exact-first ranked: an unambiguous exact name match wins outright even when several looser matches exist, and those are disclosed as alternatives rather than silently dropped. A name that matches only the PARENT committee (no subcommittee) is returned as the committee, with parent_only_match: true and a note — never presented as if it were a more specific subcommittee. A subcommittee's own record always names its parent separately (parent_committee_id/parent_committee_name); its chair/ranking_member are its OWN, resolved from its own roster, never the parent's.
get_votes) — two sources, one tool(fleet #3183, 2026-10-16 — follow-up to #3164, which left this tool refusing outright.) Pass chamber: "house" or "senate"; the two chambers number their roll-call votes independently, so there is no single combined listing.
date is the Record's issue date, i.e. the Senate's legislative day: a day that runs past midnight is printed under the earlier date (the 1 July 2025 vote on H.R. 1 is under 30 June).question and result are the Record's own sentences (The question is, Will the Senate advise and consent... / The nomination was confirmed.). When the Record has no outcome sentence this tool can match, result is null with a result_note — it is never inferred from the tally, because cloture and treaty votes need more than a simple majority.unparsed with the reason, and a gap in the returned range of vote numbers is named in note.total is the highest roll-call number printed so far in the session (Senate roll numbers run 1..N), not a count of what this call read.congress-member-votes with chamber: "senate".Every response names its own chamber, congress, session and source. Omit congress/session for the CURRENT session; session (1 or 2 — each Congress has exactly two, one per calendar year) can only be inferred for the current Congress — naming a different, past Congress without a session is a named argument error, not a guess. A chamber/congress/session nothing has been published for returns a named reason, never a silent empty list.
total (House) is congress.gov's own session vote count (pagination.count), the same at any limit — the House list endpoint carries no sort and this pack fetches/re-ranks only enough rows to satisfy limit, so total is read from the API's own count, never backfilled from however many rows this one call happened to fetch (fleet #3215). If congress.gov ever omits that count, total is left out entirely with a note, rather than silently reporting the fetched-row count as the real total. other_votes was dropped from House vote records (fleet #3215) — it was a sum of present_votes + not_voting that, on every observed live vote, read identically to not_voting alone (present votes are rare); sum the two yourself if you want that figure.
House votes are NOT read from the list endpoint at all, at any offset — confirmed live, 2026-10-17: even a page fetched from the TAIL of the list (an earlier attempt at this fix) can have holes (one real session's limit:10 came back 314..307, 304, 303 — rolls 306 and 305 were simply missing from that page). House roll-call numbers are sequential 1..pagination.count within a session, so the newest votes are addressed DIRECTLY by number (count, count-1, ...) via the single-vote detail endpoint — no list page, no jitter, no holes. This is capped at 25 per call for House (each vote costs its own upstream request); a higher limit is clamped with a note. A roll number congress.gov has no record of (vacated/stricken and never reused) is skipped and named in note — total itself is unaffected, since it already comes from pagination.count, not from counting what was successfully fetched.
member_legislative_stats)member_legislative_stats({ bioguide_id, congress? }) returns, for one member in one Congress: bills sponsored, bills cosponsored, sponsored bills that became law, and the share of the member's newest sponsored bills (up to 60, reported as bills_analysed) that drew at least one cosponsor from the other major party. These are counts Pipeworx computes from Library of Congress records, not an official score. GovTrack's report-card figures (bills joined from the other party, rank and percentile among members) are not computed: they need every member's record, and GovTrack blocks automated access. The response says so in not_computed.
Congresses are numbered sequentially: 119th Congress = 2025-2027 (started Jan 2025), 118th = 2023-2025, etc. Bills carry their Congress number — HR1 of the 119th is a different bill than HR1 of the 118th.
| Prefix | What it is | Chamber |
|---|---|---|
| HR | House Bill | House |
| HRES | House Resolution (procedural) | House |
| HJRES | House Joint Resolution | House |
| HCONRES | House Concurrent Resolution | House |
| S | Senate Bill | Senate |
| SRES | Senate Resolution | Senate |
| SJRES | Senate Joint Resolution | Senate |
| SCONRES | Senate Concurrent Resolution | Senate |
For "regular legislation" purposes, HR and S are the meaningful types. Resolutions don't have force of law (HRES, SRES) or are limited (HJRES, SJRES — the latter can amend the Constitution if ratified).
status_label on each bill is congress.gov's free-text latestAction, not a coded status — read it rather than pattern-matching it.get_votes covers recorded roll calls — many congressional decisions happen by voice vote or unanimous consent and never appear in either chamber's roll-call records at all.Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"congress": {
"url": "https://gateway.pipeworx.io/congress/mcp"
}
}
}tools/list at https://gateway.pipeworx.io/congress/mcp returns the tools in the table above plus the shared Pipeworx meta-tools — ask_pipeworx, discover_tools, search_within, remember/recall and the rest of the gateway-wide set. So the tool count you see is larger than this table: a single-pack endpoint currently lists roughly 30 shared tools alongside the pack's own. The connection's initialize response states its exact scope, and is the authoritative answer for a given day.
This is deliberate, not multiplexing by accident. The meta-tools are what let a scoped connection answer a question this pack does not cover — via ask_pipeworx, which routes across the whole catalog — without you adding a second MCP server. There is currently no way to mount a pack endpoint without them; if the extra schemas cost you more context than the routing is worth, connect to the full gateway once rather than to several pack endpoints.
Or connect to the full Pipeworx gateway to get every pack's tools listed directly, instead of just this one's:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}Both URLs reach the same gateway and the same 1856+ data sources. The only difference is which pack's tools are listed directly; ask_pipeworx reaches all of them from either one.
curl -X POST https://gateway.pipeworx.io/v1/tools/congress_search_bills \
-H 'Content-Type: application/json' \
-d '{"query":"Lower Energy Costs Act","limit":10}'No account needed for the first calls. Inspect any tool: GET https://gateway.pipeworx.io/v1/tools/congress_search_bills. Find one: POST https://gateway.pipeworx.io/v1/tools/search_packs with {"query":"..."}.
@pipeworx/mcp-congress is a local stdio bridge to the Pipeworx gateway: your MCP client starts it with npx, and it forwards every call to the same https://gateway.pipeworx.io/congress/mcp endpoint shown above. It needs network access; there is no offline mode.
{
"mcpServers": {
"congress": {
"command": "npx",
"args": ["-y", "@pipeworx/mcp-congress"]
}
}
}Without a key it calls anonymously, capped at 50 calls a day. A free account raises that to 200 a day: get a key at https://pipeworx.io/signup and add "env": { "PIPEWORX_API_KEY": "<your key>" } to the server entry. The key is sent as a Bearer token, the same way a hosted connection sends it, so calls are metered and billed exactly as they are there.
It lists only this pack's tools by default. Set PIPEWORX_META_TOOLS=1 to also list ask_pipeworx and the other gateway-wide tools.
Behind an HTTPS proxy: Node's built-in fetch does not read HTTPS_PROXY by default. Newer Node releases honour it when NODE_USE_ENV_PROXY=1 is set; check your Node version's documentation.
Instead of calling tools directly, you can ask questions in plain English — this works on the pack endpoint above as well as on the full gateway:
ask_pipeworx({ question: "your question about Congress data" })The gateway picks the right tool and fills the arguments automatically.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.