Tulimoa Gateway

The material indicates no required secrets or environment variables, and there is no stated need for API keys, OAuth tokens, or sensitive local credentials, so credential exposure appears limited. Still, risk would increase if later versions introduce login or account-binding mechanisms.

The tool declares outbound access to gateway.tulimoa.com, and its 'gateway/persistent memory layer' function implies that user inputs or context are likely sent to that remote service and may be retained. The endpoint is known and aligned with the stated function, so this is a normal caution item rather than a clear high-risk red flag.

System checks indicate that this MCP tool executes code or starts local processes. That is a normal capability for MCP tools, so it should be run with least privilege and restricted host permissions; the available material does not show a request for clearly excessive system privileges unrelated to its function, so this alone does not justify a high-risk rating.

The description explicitly mentions a 'persistent memory layer,' indicating that the tool is designed to process and retain some user context or memory data. The material does not specify local file access scope or provide details on retention, deletion, or isolation controls, so this should be treated as a normal privacy caution due to data retention and unclear boundaries.

Positive signals include distribution through an official registry and updates within the last year, both of which reduce supply-chain risk. However, the source is not auditable, no license is declared, and public community adoption appears very low (0 stars), limiting independent verification. Overall this fits a caution rating rather than high risk.