$ loading_
Query openFDA data on drugs, foods, devices, and recalls.
Overall, this tool is mostly in the caution range: it is from an official registry, open-source, and recently maintained, but it runs locally and requires an API key. Special attention is warranted because its declared remote endpoint is a custom domain, openfda.caseyjhand.com, rather than a typical official FDA domain, so user queries may be routed through a third-party service.
The tool requires OPENFDA_API_KEY and MCP_LOG_LEVEL; OPENFDA_API_KEY is a reusable credential and should be treated as sensitive, while MCP_LOG_LEVEL is only a configuration setting. The materials do not show additional high-privilege secrets or an obvious credential-abuse design.
The tool connects to openfda.caseyjhand.com, so user queries and related context are likely sent to that remote host. Although it claims to access FDA/openFDA data, the endpoint is not a typical official FDA domain, which raises a concrete red flag for third-party proxying or additional logging, making network egress a higher-risk concern.
As an MCP tool, it runs a local service process and executes its server code, which is a normal capability for this class of tool. The materials do not indicate unusual system privileges or clearly unrelated high-risk operations.
The available materials only indicate remote querying of FDA data and do not show any need to read/write local files, access databases, or request data permissions beyond its stated function. Based on the disclosed information, the data-access surface appears limited, though least-privilege controls are still advisable in practice.
Positive signals include an official registry source, open-source code, and updates within the last year, making the code auditable in principle. However, the missing README, undeclared license, and very low community adoption (0 stars) limit transparency and ecosystem validation, so the supply-chain posture is better rated as caution rather than low risk.
Copy the install command and let the AI configure it · recommended for beginners
Please install the "io.github.cyanheads/openfda-mcp-server" MCP server from askskill: Run: claude mcp add 'io-github-cyanheads-openfda-mcp-server' -- npx -y @cyanheads/openfda-mcp-server
Query FDA approvals, clearances, recalls, and adverse events for clinical research.
Query U.S. FDA public regulatory data for drugs and medical devices.
Query and analyze FDA public health datasets using natural language commands.
Search FDA food recalls and adverse event reports with filters and pagination.
Search FDA data and regulatory decision documents with LLM-friendly access.
Search and query structured data from government open-data portals.