C

Mapbox MCP Server

Official Mapbox MCP server providing geospatial intelligence through geocoding, routing, spatial analysis, and map visualization tools

Overall Score67/100

Score Breakdown

Server Info

Package
@mapbox/mcp-server
Registry
npm
Maintainer
MapboxVendor
Category
Developer Tools
Tags
mapsgeocodingdirections
Last Scanned
7 Apr 2026

Findings

4 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport. Requires MAPBOX_ACCESS_TOKEN environment variable. The token is appended as a query parameter to all Mapbox API requests. Also supports Bearer auth header extraction for access tokens. Optional MAPBOX_API_ENDPOINT for custom API endpoints. No MCP OAuth or HTTP transport. For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

LLM Safety

HIGHTool descriptions contain instructional language

Descriptions include directives that could influence LLM behavior beyond tool selection.

Remediation

Remove instructional language. Descriptions should be purely factual.

Data Exposure

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Maintenance & Trust

HIGH6 dependency vulnerabilities (1 critical, 2 high)

npm audit found 1 critical and 2 high severity CVEs.

Remediation

Run `npm audit fix` and update vulnerable dependencies.

Tools

30 total
NameDescriptionRisk
search_and_geocode_toolSearch for places and geocode addresses using Mapbox Search APIread
reverse_geocode_toolReverse geocode coordinates to addressesread
directions_toolFetches directions from Mapbox API based on provided coordinates and direction method. For route planning and distance calculations, use geometries="none" to get compact responses. Only request full geometry (geometries="geojson") when you need to visualize the route on a map or provide detailed turn-by-turn navigation instructions.read
isochrone_toolCalculate travel time isochrones from Mapbox APIread
matrix_toolCalculate travel time/distance matrices between multiple pointsread
map_matching_toolMatch GPS coordinates to road segments using Mapbox Map Matching APIread
optimization_toolOptimize route ordering for multiple waypointsread
static_map_image_toolGenerate static map images from Mapboxread
place_details_toolGet detailed information about a place by Mapbox IDread
category_search_toolSearch for places by category using Mapbox Search APIread
area_toolCalculate the area of a GeoJSON polygonread
bearing_toolCalculate bearing between two pointsread
bbox_toolCalculate bounding box for GeoJSON geometryread
buffer_toolCreate a buffer polygon around a GeoJSON geometryread
centroid_toolCalculate the centroid of a GeoJSON geometryread
convex_toolCalculate convex hull of a set of pointsread
destination_toolCalculate destination point given start, distance, and bearingread
difference_toolCalculate the difference between two polygonsread
distance_toolCalculate distance between two pointsread
intersect_toolCalculate the intersection of two polygonsread
length_toolCalculate the length of a GeoJSON lineread
midpoint_toolCalculate the midpoint between two pointsread
nearest_point_toolFind the nearest point to a reference point from a set of pointsread
nearest_point_on_line_toolFind the nearest point on a line to a reference pointread
point_in_polygon_toolCheck if a point is inside a polygonread
points_within_polygon_toolFind which points from a set fall within a polygonread
simplify_toolSimplify a GeoJSON geometry while preserving shaperead
union_toolCalculate the union of two or more polygonsread
category_list_toolList available Mapbox place categoriesread
resource_reader_toolGeneric fallback tool for reading MCP resources by URIread

Deploy Mapbox MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow