Trends MCP Server

The stdio adapter reads TRENDSMCP_API_KEY from the environment, sends it only as a Bearer header to the hardcoded api.trendsmcp.ai endpoint, and forwards tool arguments to that single host. No hardcoded secrets, shell execution, or data exfiltration to third parties were found, and the env_vars and network_http permissions match the server's purpose and the category baseline. Only low-severity robustness issues were noted, such as unguarded JSON parsing of upstream responses. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity).

5 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.