
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Yatmo MCP server (local stdio edition): neighbourhood data for AI assistants and agents. Nearest school, nursery, supermarket, public transport, train station and motorway with travel times around any property, in 25 countries.
Yatmo exposes its neighbourhood intelligence to AI clients through a remote MCP server. Connect Claude, Cursor, VS Code or your own agent, and it can answer "what is around this property?" with real data: nearest school, nursery, supermarket, public transport, train station, motorway access, distances with travel times, and a quotable summary paragraph, in 25 countries.
Two ways to use it: the hosted server operated by Yatmo at https://mcp.yatmo.com/mcp/v1 (Streamable HTTP, nothing to
install), or the local edition in this repository (npx -y @yatmo/mcp, stdio), which exposes the same four tools and
calls the Yatmo API with your key. This repository also holds ready-to-copy client configurations and a quick start. Full documentation:
documentation.yatmo.com/mcp.
| Tool | Returns |
|---|---|
yatmo_get_location_summary | A human-readable neighbourhood paragraph plus the nearest school, nursery, supermarket, transport and the reverse-geocoded place |
yatmo_get_nearby_pois | An ordered list of points of interest around a property, optionally filtered by category, within a radius |
yatmo_get_nearest_by_category | The single nearest place of a category, with distance and travel time |
yatmo_get_accessibility_profile | Public-transport presence, nearest stop, nearest train station, nearest motorway access |
All tools take latitude, longitude, country (BE, FR, UK...) and language, and return the same envelope:
text (a summary the assistant can quote), facts (structured data), warnings and metadata. Categories use one
vocabulary everywhere: school, nursery, supermarket, public_transport, train_station, motorway.
Details: tools reference.
Every request carries your Yatmo backend key in the LicenceKey header (LicenseKey is accepted too). Keep the
key in the client's secret store, never in a public web page: the key grants access to your Yatmo account. Get a key at
yatmo.com; keys explained.
Generic remote-MCP configuration (configs/mcp.json), accepted by most clients, sometimes under a slightly different parent key:
{
"mcpServers": {
"yatmo": {
"url": "https://mcp.yatmo.com/mcp/v1",
"headers": { "LicenceKey": "YOUR_KEY" }
}
}
}
Claude.ai and Claude Desktop: Settings > Connectors > Add custom connector, URL https://mcp.yatmo.com/mcp/v1,
custom header LicenceKey: YOUR_KEY. The four tools appear once the connector is enabled.
Claude Code:
claude mcp add --transport http yatmo https://mcp.yatmo.com/mcp/v1 --header "LicenceKey: YOUR_KEY"
Cursor: copy configs/cursor/mcp.json to .cursor/mcp.json in your project (or to
~/.cursor/mcp.json for every project).
VS Code (Copilot agent mode): copy configs/vscode/mcp.json to .vscode/mcp.json.
Your own agent (Anthropic, OpenAI or any LLM SDK): use an MCP client library (TypeScript, Python, .NET, Go) with the
Streamable HTTP transport, add the LicenceKey header to the transport, and forward the four tool definitions to the
model. quickstart.py shows the raw protocol without any library.
For clients that prefer a local process, or to inspect the code: @yatmo/mcp on npm, Node.js 18 or later, two
dependencies (the official MCP SDK and zod). Same tools, same JSON answers as the hosted server; the key is read from the
LicenceKey environment variable and sent to the Yatmo API only.
{
"mcpServers": {
"yatmo": {
"command": "npx",
"args": ["-y", "@yatmo/mcp"],
"env": { "LicenceKey": "YOUR_YATMO_KEY" }
}
}
}
From a clone: npm install, then LicenceKey=YOUR_YATMO_KEY node src/index.js. Tests: npm test (mapping checked on a
real API answer). Listing the tools works without a key; a tool call without one returns a 401 envelope.
export YATMO_KEY=your_backend_key
python3 quickstart.py # initialize, list the tools, call yatmo_get_location_summary on a Brussels address
sh quickstart.sh # the same three calls with curl
The assistant answers from the text and facts of the tools; distances come with the mode they were measured in.
MIT licence for the files of this repository. Yatmo is a paid service for real estate portals, agency networks and developers.
The server is published in the official MCP registry as com.yatmo/yatmo (server.json in this repository) and submitted to the Docker MCP Catalog, Smithery and mcp.so. In clients that read the registry, search for "yatmo" or "real estate".
FAQs
Yatmo MCP server (local stdio edition): neighbourhood data for AI assistants and agents. Nearest school, nursery, supermarket, public transport, train station and motorway with travel times around any property, in 25 countries.
The npm package @yatmo/mcp receives a total of 6 weekly downloads. As such, @yatmo/mcp popularity was classified as not popular.
We found that @yatmo/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.