io.github.CSOAI-ORG/ai-gateway-mcp

The material explicitly states that no keys or environment variables are required, and there is no request for API tokens, account credentials, or other sensitive authentication data; based on the available facts, credential exposure appears low.

No remote endpoint is declared, and the material does not describe connections to external services or sending user data to third parties; based on current information, there is no clear data-egress path.

The system checks indicate it has executes-code capability, meaning it may spawn local processes or execute code. This is a normal high-privilege capability for MCP tools and does not by itself justify a high-risk rating, but the missing README and lack of detail on what system capabilities it can invoke warrant caution and runtime restrictions.

The material does not specify what local files, directories, or other resources it can read or write; combined with its code-execution capability, it could theoretically access local data, but there is no evidence that it requests permissions beyond its stated purpose, so this is rated caution rather than risk.

Positive signals include an official registry source, an open-source repository that can be audited, and updates within the last year; these materially reduce supply-chain risk. Points of caution are the missing README, undeclared license, and very low community adoption (0 stars), which limit audit context and external validation.