eu.ansvar/dutch-law-mcp

The material explicitly states that no keys or environment variables are required. There is no indication that API tokens, account credentials, or other sensitive secrets are needed, so credential exposure risk appears low.

The description says it can query Dutch statutes, court decisions, EU cross-references, and parliamentary documents, which typically implies access to external legal data sources. However, no specific remote endpoints are disclosed, so the scope and destination of network egress are not fully transparent.

The objective checks mark this tool as executes-code, meaning it runs code/processes locally; this is a normal property for MCP tools. The available material does not show requests for extra high-risk privileges unrelated to legal querying, so this alone does not justify a high-risk rating.

The README is missing and does not specify what local files, caches, or logs it may read or write. As an MCP tool with execution capability, some local data access surface should be assumed, but there is currently no factual indication of clearly excessive access.

The tool is listed in an official registry and has an auditable open-source repository with updates within the last year, all of which are strong positive signals. While community stars are low and no license is declared, this mainly reduces maturity and compliance clarity rather than creating a high-risk red flag.