
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
queensestate
Advanced tools
An MCP server that lets an LLM answer Charlotte residents' everyday questions with official public data from the City of Charlotte Open Data Portal — https://data.charlottenc.gov.
The portal lives at
data.charlottenc.gov. It is an ArcGIS Hub site; its ~380 datasets are ArcGIS REST layers run by the City of Charlotte and Mecklenburg County. No API key is required.
A survey of the catalog (/api/feed/dcat-us/1.1.json) shows these main themes:
| Theme | Examples |
|---|---|
| Public safety | CMPD incidents (870k+ since 2017, updated daily), homicides, traffic stops, fire incident reports, crashes |
| City services | 311 service requests (3.4M), solid-waste collection routes, code enforcement cases, street closures |
| Planning & zoning | Zoning, rezoning petitions, historic districts, 2040 policy map, floodplains, parcels |
| Transportation | CATS bus routes and stops, LYNX light rail, park-and-ride, bike lanes, sidewalks, greenways |
| Places | Libraries, schools, parks, fire/police stations, pharmacies, grocery stores, EV chargers, day care |
| Government | Capital projects, budget, employee salaries, council and commissioner districts |
| Demographics | Census block groups/tracts, Quality of Life neighborhood profiles |
The tools are chosen for the questions residents actually ask. Every tool is read-only, and
every location parameter accepts either an address ("600 E 4th St, Charlotte") or
"latitude,longitude".
| Tool | Answers questions like |
|---|---|
get_address_profile | "Who is my council member?" "What police division and fire station serve me?" "What's my zoning? Am I in a flood zone or historic district?" |
get_trash_and_recycling_schedule | "What day is trash pickup? Is this a recycling week (GREEN/ORANGE)?" |
lookup_address | "Is this a valid address? What's its parcel ID and municipality?" |
| Tool | Answers questions like |
|---|---|
get_crime_near | "Any car break-ins near my apartment this month?" |
summarize_crime | "How have robberies in Charlotte changed since 2019?" "Which division has the most burglaries?" |
get_traffic_crashes_near | "Is the intersection by my kid's school dangerous?" |
| Tool | Answers questions like |
|---|---|
get_311_requests_near | "Has anyone already reported this pothole or streetlight?" |
get_code_enforcement_cases | "Does the house I'm renting have open housing-code violations?" |
get_street_closures | "Are any roads closed on my commute?" |
get_capital_projects_near | "What's being built near me, when is it done, and who do I contact?" |
get_pending_rezonings | "Is anyone trying to rezone land near my neighborhood?" |
| Tool | Answers questions like |
|---|---|
find_nearby_places | Nearest library, school, park, greenway, pharmacy, grocery store, EV charger, light rail station, bus stop, public Wi-Fi… (18 categories) |
get_bus_route | "How often does the 9 run on Sunday evenings?" |
| Tool | Answers questions like |
|---|---|
get_city_budget | "How much does the city budget for Police?" |
get_city_salary_stats | "What do Charlotte firefighters earn on average?" (aggregates only, no names) |
| Tool | Purpose |
|---|---|
search_datasets | Keyword search over the whole portal |
describe_dataset | Fields, types, and record count for a layer |
query_dataset | SQL-filtered records from any layer, optionally near a location |
summarize_dataset | Server-side counts/sums grouped by fields |
Requires Python 3.14 (developed on 3.14.7).
~/.pyenv/versions/3.14.7/bin/python -m venv .venv
.venv/bin/python -m pip install -e . --group dev
claude mcp add queensestate -- /absolute/path/to/queensestate/.venv/bin/queensestate
Add to claude_desktop_config.json:
{
"mcpServers": {
"queensestate": {
"command": "/absolute/path/to/queensestate/.venv/bin/queensestate"
}
}
}
.venv/bin/queensestate --transport http --port 8000 # http://127.0.0.1:8000/mcp
npx @modelcontextprotocol/inspector .venv/bin/queensestate # interactive inspector
The http transport authenticates its callers with Google OAuth and refuses to start
without a public URL, a Google client, and an allow list — see Hosting. To try
it locally:
QUEENSESTATE_PUBLIC_URL=http://localhost:8000 \
QUEENSESTATE_GOOGLE_CLIENT_ID=... QUEENSESTATE_GOOGLE_CLIENT_SECRET=... \
QUEENSESTATE_ALLOWED_EMAILS=you@gmail.com \
.venv/bin/queensestate --transport http --port 8000
The hosted server runs on Google Cloud Run at https://queensestate.adamwanninger.com/mcp, and is its own OAuth 2.1 authorization server: it delegates the sign-in to Google purely to learn which account is calling, then checks that address against an allow list and mints its own tokens. Google's tokens are never passed through to the MCP client.
claude mcp add --transport http queensestate https://queensestate.adamwanninger.com/mcp
scripts/deploy-gcp.sh provisions and deploys the whole thing, and re-running it is also
how you update. See deploy/GCP.md.
Hosting is only for the HTTP transport. Running the server locally over stdio needs no Google account, no allow list, and none of the cloud dependencies.
.venv/bin/pytest # unit + in-memory MCP tests; no network access
.venv/bin/ruff format --check . && .venv/bin/ruff check .
.venv/bin/mypy
Layout:
src/queensestate/arcgis.py: async ArcGIS REST / Hub client (timeouts, bounded retries, host allowlist)src/queensestate/address.py: address matching against the county Master Address layersrc/queensestate/catalog.py: the curated layers behind the purpose-built toolssrc/queensestate/server.py: the MCP tools2026-09-06T00:00:00-04:00). The underlying services store UTC.get_city_budget reports both the net total and the sum of positive lines.resultRecordCount on aggregate
queries, so the client enforces row limits itself.find_nearby_places match CATS stop IDs.gis.charlottenc.gov,
meckgis.mecklenburgcountync.gov, services.arcgis.com, gis.ci.charlotte.nc.us).MIT - see LICENSE.
FAQs
MCP server for the City of Charlotte Open Data Portal (data.charlottenc.gov).
We found that queensestate demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.