Ansvar: German Law

The materials explicitly state that no keys or environment variables are required. Although the description mentions OAuth + a paid tier, the provided materials do not show any user-managed local secret or long-lived credential requirement, and no concrete credential abuse red flag is visible.

It connects to the remote endpoint gateway.ansvar.eu; based on its stated purpose, this is likely for legal query/gateway functionality and is typical network behavior for this kind of tool. The materials do not specify what user inputs, logs, or context may be sent, so users should assume data may be transmitted to that declared endpoint.

System checks indicate that the tool executes code or starts a local process, which is common for MCP tools. The available materials do not show requests for unusual system privileges, privilege escalation, persistence, or execution behavior unrelated to its stated function, so this is caution rather than high risk.

The materials do not describe what local files, directories, or other resources it can read or write, so minimal access cannot be confirmed. No explicit over-privilege red flag is present, but given the missing documentation, users should assume it at least handles user-provided queries and grant host permissions conservatively.

Positive factors include the official registry source, an open-source repository, and updates within the last year, all of which materially reduce supply-chain risk. Points to watch are the missing README, undeclared license, and 0 stars, which weaken auditability and external adoption signals, but these do not by themselves justify a high-risk rating.