Drillr — The financial MCP for AI agents

The materials indicate no required keys or environment variables. There is no request for API keys, account passwords, or other sensitive credentials, so credential leakage and misuse exposure appears limited.

The tool connects to the declared endpoint gateway.drillr.ai to provide remote financial datasets such as tables and SEC filings. This means user queries or related context may be sent to that service, but the materials do not show exfiltration to unrelated or unknown endpoints.

System checks indicate that this MCP executes code or starts a local process, which is a normal characteristic for this type of tool. The available materials do not show requests for unusual system privileges, unrelated command execution, or clearly dangerous behavior.

Based on the description, it primarily accesses remote financial data resources, and there is no README evidence of broad local file read/write or excessive data permissions. Still, as an MCP process, the effective data exposure depends on host configuration, so only necessary context should be exposed to it.

It is sourced from an official registry and has an auditable open-source repository with updates within the last year, which are meaningful risk-reducing signals. However, the license is not stated, README information is missing, and community stars are very low, so transparency and community validation are limited, warranting caution.