eu.ansvar/french-law-mcp

The materials state that no keys or environment variables are required. There is no indication that API tokens, account credentials, or other sensitive authentication secrets are needed, so credential exposure risk appears low.

No remote endpoint is declared, and the materials do not state that user data is sent to external services. Based on the available facts, there is no explicit data egress path, though the missing README limits transparency into actual network behavior.

The system indicates that this tool executes code; as an MCP tool, that typically means running a local service process and its implementation on the host. This is normal for this class of tools and warrants standard runtime isolation, but the materials show no explicit request for privileges beyond its stated purpose.

The stated function is full-text search across French legislation, which suggests access to bundled or runtime-visible legal text data; however, the materials do not specify which local files, databases, or other resources it reads or writes. There is no clear evidence of overbroad access, but the sparse documentation supports a least-privilege deployment.

The source is an official registry entry and there is an auditable open-source repository with updates within the last year, which are strong positive signals. Community stars are low and the license is undeclared, which reduces maturity and compliance clarity, but this alone does not constitute a high-risk red flag.