ai.shawndurrani/mcp-registry

The materials explicitly state that no keys or environment variables are required. There is no indication of API tokens, OAuth credentials, or access to local secrets, so credential exposure and abuse risk appears low.

The tool connects to the declared remote endpoint mcp-registry.shawndurrani.ai to search the public MCP Registry and retrieve SSE URLs. User queries may be transmitted to that service, but there is no evidence of exfiltration to unrelated or suspicious endpoints.

System checks indicate this tool has code-execution capability, meaning it can be started/run locally as an MCP process. Based on the description its purpose appears narrow, but the materials do not define detailed OS-level boundaries, so caution is appropriate.

The description is limited to searching a public registry and copying SSE URLs. It does not claim any need to read or write local files, databases, the clipboard, or other user resources, and no obvious overbroad data access is stated.

Positive signals include its official_registry source classification and updates within the last year. However, there is no open-source repository or declared license, the code cannot be audited, and community adoption is very low (0 stars), so supply-chain transparency is limited and caution is warranted.