mcp-twfood

The materials explicitly state that no keys or environment variables are required, and there is no indication of API keys, OAuth tokens, or other sensitive credentials; based on the available facts, credential exposure and misuse risk appears low.

The description says it provides real-time Taiwan agricultural wholesale market price queries, which typically implies access to external data sources; however, no specific remote endpoints are listed, so the destination and contents of network egress are not transparent and should be verified against the stated purpose.

The system flags this tool as executes-code, meaning it runs locally as an executable MCP service. The materials do not show requests for unusual system privileges or execution capabilities beyond data-query functionality, but local code execution still warrants normal caution.

The current description only mentions product search, trade data queries, and cross-market comparisons, with no declared need to read or write local files, databases, or other sensitive resources; however, because the README is missing, the actual data access scope is not well documented, so least-privilege execution is advisable.

Positive factors include publicly available source code under the MIT License, which improves auditability; however, it comes from a third-party registry, has 0 stars, unknown maintenance status, and no README, which reduces trust and verifiability and makes independent code/dependency review advisable.