Trends MCP Server

This is a stdio MCP adapter that forwards three read-only trend-data tools to the vendor's HTTPS API using a Bearer key read from the TRENDSMCP_API_KEY environment variable. The code is small, has no shell execution, no hardcoded secrets, and no data exfiltration beyond the intended query payloads to the declared vendor endpoint. Minor notes are limited to the broad error propagation and the tool descriptions, which are instructional rather than malicious. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity).

5 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.