FreqBlog Music Metadata

No keys, tokens, or environment variables are required, and the material shows no sign of credential collection or abuse.

It connects to the declared remote endpoint mcp.freqblog.com, which means requests/data may be sent to an external service as part of normal MCP operation; no unknown or unrelated endpoints are indicated.

System checks show executes-code, meaning the tool can execute code or spawn processes locally; this is a high-privilege capability, but the material provides no concrete evidence of misuse beyond its stated function.

Its function is to fetch audio features (BPM, key, mood, genre), which typically involves processing user-provided track/query data; there is no indication of local file access or overly broad data access.

The source is an official Registry entry with updates in the past year, which is a positive signal; however, the repository is not auditable, no license is declared, and community adoption is 0 stars, so supply-chain transparency is limited.