Tiktok Trends MCP Server

The server is a stdio MCP adapter that forwards three read-only trend-data tools to api.trendsmcp.ai using a Bearer key read from the TRENDSMCP_API_KEY environment variable. No malicious patterns, shell execution, hardcoded secrets, or filesystem access were found, and the network and env_vars permissions match the stated purpose. Minor items are limited to the unauthenticated tools/list behavior, the lack of an explicit HTTP error check on non-JSON responses, and the lack of a pinned version constraint on the API host. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity).

5 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.