io.github.CSOAI-ORG/text-stats-ai-mcp

The materials explicitly state that no keys or environment variables are required, and no API tokens, account credentials, or other sensitive secrets are described, so credential exposure and misuse risk appears low.

No remote endpoints or external service connections are declared, and the described functionality is limited to local text statistics; based on the available information, there is no clear user-data egress path.

The system checks indicate that this tool executes code; this is a normal MCP capability and means a local service process will run on the host. The materials do not show requests for unusual system privileges, but it should still be deployed as a least-privilege local executable component.

The description only covers counting words, estimating reading time, and computing keyword density on input text; there is no stated ability to read or write local files, databases, or other sensitive resources, and no sign of data access beyond its stated purpose.

Positive factors include the official registry source, an auditable open-source repository, and updates within the last year; however, the repository has no declared license, lacks a README, and has very low community adoption (0 stars), so the audit context is limited and source/dependency review is advisable before installation.