Trends MCP Server

The Trends MCP stdio adapter is a thin forwarder that sends tool arguments to the vendor's own API host (api.trendsmcp.ai) with a Bearer key read from TRENDSMCP_API_KEY, which is the expected design for a hosted data service. No shell execution, eval, file writes, or obfuscation were found, and the only network destination is the documented vendor endpoint. Minor points are the lack of an explicit timeout-related error handling for non-JSON responses and the broad exception behavior in response parsing, both low severity and not affecting the score materially. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity).

5 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.