open-seo

The materials explicitly state that no keys or environment variables are required. No API tokens, account credentials, or other sensitive authentication data are requested, so credential exposure and abuse risk appears low.

The declared remote endpoint host is 'none', and the materials do not describe sending user data to any third-party service. Based on the stated facts, there is no clear outbound data path, although the missing README means network behavior is not documented in detail.

The system checks explicitly mark this tool as executing code, which implies ordinary MCP capability to run local processes or logic. This warrants caution by default, but the materials do not show red flags such as privilege escalation, persistence, or suspicious system actions beyond its stated purpose.

The description only says it is an open-source alternative to Semrush/Ahrefs; it does not claim access to sensitive directories, arbitrary file writes, browser data, or broad system resources. There are no clear signs of overbroad authorization, though the missing README leaves the exact read/write scope unspecified.

The source is an open GitHub repository under the MIT license with about 2.2k stars, providing auditability and some community trust; these are strong risk-reducing signals. The remaining caveats are unknown maintenance status and sparse documentation, so the repository activity and dependency list should still be reviewed.