Server data from the Official MCP Registry
Expert-curated knowledge graphs for AI agents — PSFK Retail, Beauty, Sports and more.
Expert-curated knowledge graphs for AI agents — PSFK Retail, Beauty, Sports and more.
The Fodda MCP server is a legitimate knowledge graph service with proper API key authentication and reasonable permissions for its category (Developer Tools / Data Services). However, several security concerns lower the score: (1) API keys are passed via URL query parameters in setup instructions, creating exposure risks; (2) extensive external API integrations (Google GenAI, Firestore, Neo4j) without visible rate limiting or input validation; (3) broad error handling that may leak sensitive data; (4) no evidence of secrets rotation or credential expiration; (5) code complexity and truncation make full vulnerability assessment difficult. The server is not malicious but has operational security gaps that users should be aware of. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.
4 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: FODDA_API_KEY
Environment variable: FODDA_API_URL
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-piers-fawkes-fodda": {
"env": {
"FODDA_API_KEY": "your-fodda-api-key-here",
"FODDA_API_URL": "your-fodda-api-url-here"
},
"args": [
"-y",
"fodda-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.