Daedal Map — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Daedal Map (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Most callers do not need to run anything - DaedalMap is a live remote MCP server (and HTTP API) for geographic data:
https://app.daedalmap.com/mcp (streamable HTTP)get_catalog, then get_pack for a pack's metrics and afirst-query example
UN SDG, World Factbook, WorldPop
the server returns the exact price before any charge)
https://daedalmap.com/docs/for-agentsThe rest of this README is the self-host / local-runtime path.
DaedalMap is a map-first geographic query engine. This repository is the open app/runtime for developers who want to run it locally, self-host it, point it at their own data, or extend it with compatible geographic datasets.
Public surfaces:
https://app.daedalmap.comhttps://daedalmap.comThere are now two valid ways to approach DaedalMap locally:
GitHub/self-host pathDownloadable launcher pathThese should stay the same product at the runtime/contract level, but they do not need identical UI on every surface.
If you are using this public GitHub repo as a self-host/local runtime, the practical setup contract right now is:
DATA_ROOT, unless you use the default app-data path)OPENAI_API_KEY or ANTHROPIC_API_KEY)Supabase and hosted account wiring are optional for self-host use.
Use this repo if you want to:
Typical use cases:
DaedalMap itself is built around three ideas:
This repo is therefore best read as:
the launcher
It is not the hosted account, billing, or admin surface. Those product surfaces are separate from the public runtime and may evolve faster than the downloadable runtime UI.
If you are deciding between this repo and the downloadable launcher, use this rule of thumb:
The goal is that both paths converge on the same core runtime behavior even if their setup UX differs.
If you are browsing this repository, treat it as the developer and self-host entry point.
If you want a more guided local install path, use the downloadable launcher when it is available through release/distribution channels.
In other words:
Both paths are intended to lead to the same DaedalMap runtime family.
The hosted runtime ships with 40+ curated sources across disasters, demographics, economics, and climate. Coverage below reflects the current maintained pack inventory.
| Source | Scale | Time Range |
|---|---|---|
| USGS Earthquakes | 1M+ events | 2150 BC - present |
| IBTrACS Hurricanes/Cyclones | 13K storms | 1842 - present |
| NOAA Tsunamis | 2.6K events | 2000 BC - present |
| Smithsonian Volcanoes | 11K eruptions | Holocene |
| Global Wildfires | 940K events/year | 2002 - 2024 |
| USA/CAN Tornadoes | 81K events | 1950 - present |
| Global Floods | 4.8K events | 1985 - 2019 |
| Global Landslides | 45K events | 1760 - present |
Disaster events include 22M+ geographic location relationships and 566K cross-disaster links (aftershocks, triggered events).
| Source | Countries | Years | Category |
|---|---|---|---|
| Our World in Data CO2 | 217 | 1750 - 2024 | Environment |
| WHO Health Statistics | 198 | 2015 - 2024 | Health |
| IMF Balance of Payments | 195 | 2005 - 2022 | Economy |
| UN Sustainable Development Goals | 200+ | 2000 - 2023 | SDGs 1-17 |
| Eurostat Demographics | 37 European countries | 2000 - 2024 | Demographics |
| Country | Source Count | Examples |
|---|---|---|
| USA | 15+ | Census, FEMA National Risk Index, NOAA storms |
| Canada | 3 | Statistics Canada, NRCan earthquakes, drought |
| Australia | 2 | ABS population, BOM cyclones |
Disasters are displayed with animated, type-specific rendering:
DaedalMap now treats runtime behavior as a 2-axis matrix:
INSTALL_MODElocal = local app/runtime installcloud = hosted/server deploymentRUNTIME_MODElocal = query local datacloud = query managed cloud-backed data via local cache + DuckDB httpfsSupported combinations:
local install + local datalocal install + cloud datacloud install + cloud dataNot supported as a first-class runtime shape:
cloud install + local dataThe current hosted/runtime direction is:
In RUNTIME_MODE=cloud, the runtime:
httpfsHosted deployment topology, release lanes, and operator control-plane details belong in private deployment notes.
That means the same codebase can be used in:
Guest users can open the app and try the public workflow without logging in.
Logged-in users currently get:
daedalmap.comThe public app no longer owns the account/settings UI. app.daedalmap.com stays focused on the runtime and map engine, while .com owns login, account, billing, and admin/runtime control-plane views.
cd county-map
pip install -r requirements.txtCreate a .env file for local development. The minimum useful local setup is:
ANTHROPIC_API_KEY=your_key_here
DATA_ROOT=C:/path/to/your/local/dataYou can use OPENAI_API_KEY instead of ANTHROPIC_API_KEY if that is your preferred provider. If you leave DATA_ROOT blank, DaedalMap uses the default local app-data path and expects your data to live there.
Hosted-style object-storage configuration is intentionally deployment-specific. For public self-hosting, start with local data. Operators who run a cloud-backed deployment should provide their own object-storage bucket, endpoint, and credentials through environment variables.
Most local users should leave these blank unless they intentionally want overrides:
DATA_ROOT=
APP_URL=
SITE_URL=What they mean:
DATA_ROOTonly used in RUNTIME_MODE=local; leave blank to use the default local app-data folder
APP_URLoptional advertised app URL; leave blank for normal local runs
SITE_URLoptional website/docs/account URL override; leave blank for normal local runs
If you are configuring your own hosted deployment, set:
INSTALL_MODE=cloud
RUNTIME_MODE=cloud
PORT=7000If you want optional Supabase-backed auth locally:
SUPABASE_URL=...
SUPABASE_ANON_KEY=...Keep service-role keys server-side only. They are not needed for ordinary local evaluation.
python app.pyOpen:
http://localhost:7000The runtime exposes discovery and query endpoints on your local instance.
Discovery (no auth, no payment):
GET /api/v1/guideGET /api/v1/catalogGET /api/v1/packs/{pack_id}Execution:
POST /api/v1/query/datasetSelf-host instances return commercial_access_unavailable for the paid execution lane unless a commercial verifier is configured. Discovery endpoints work without additional setup.
For managed data access via the hosted API or MCP, see daedalmap.com/docs/for-agents.
The runtime resolves behavior from two explicit modes:
INSTALL_MODEcontrols deployment defaults like writable directories and default URLs
RUNTIME_MODEcontrols the data plane
Data mode behavior:
RUNTIME_MODE=localuses DATA_ROOT
RUNTIME_MODE=clouduses the hydrated local cloud cache as DATA_ROOT
Default local writable folders on Windows:
CONFIG_DIR=%LOCALAPPDATA%\DaedalMap\configSTATE_DIR=%LOCALAPPDATA%\DaedalMap\stateCACHE_DIR=%LOCALAPPDATA%\DaedalMap\cacheLOG_DIR=%LOCALAPPDATA%\DaedalMap\logsPACKS_ROOT=%LOCALAPPDATA%\DaedalMap\packsDATA_ROOT=%LOCALAPPDATA%\DaedalMap\dataIn hosted/cloud mode:
That makes local cloud-mode testing useful for reproducing hosted-runtime behavior before deploy.
Important note:
data/ demo treeDATA_ROOT in local mode, or RUNTIME_MODE=cloud with cloud storage configuredOPENAI_API_KEY or ANTHROPIC_API_KEYThe old “demo data folder plus converters” framing is no longer the whole story.
The current direction is:
Key concepts:
available packsinstalled packsentitled packsactive runtime catalogThese are intentionally distinct.
Explore chat and Research chat use different discovery paths:
After a specific source is selected, they should follow the same source contract:
temporal_coverage is discovery guidancemetrics.{metric_id}.years is the execution truthThat shared source-specific logic now lives in mapmover/source_time_contract.py. Use that helper module for metric-aware year bounds instead of re-implementing time-range logic separately in Explore or Research code paths.
/settings now behaves differently depending on mode:
For self-host users, /settings is the in-app reminder page for:
Important files and folders:
app.py - FastAPI app entrypointmapmover/ - runtime logic, routes, path helpers, DuckDB helpersstatic/ - frontend app modules and stylestemplates/ - app HTML shellsupabase_client.py - auth/control-plane integrationdocs/ - local documentation for schemas, runtime notes, and reference materialPublic runtime docs live in docs/README.md.
Recommended starting points:
loc_id conventionsUseful local modes:
DATA_ROOTQuestions, feedback, or self-host issues: [email protected]
MIT
If an agent or tool was pointed at this README for programmable access, use:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.