HSN Classifier

The materials explicitly state that no keys or environment variables are required. There is no indication of API keys, OAuth tokens, or local sensitive credentials, so credential exposure and abuse risk appears low.

The tool connects to the declared remote endpoint hsn-classifier-mcp.atlasword.workers.dev, and requests may include user-provided product descriptions or names. This egress is consistent with its stated HSN/GST lookup function, but it still means query content leaves the local environment.

System checks indicate it has executes-code capability, meaning it can run the relevant service/process locally as an MCP tool. This is a normal MCP characteristic; the provided materials do not show requests for elevated privileges, unrelated system actions, or command-injection behavior.

The description only indicates looking up HSN/GST codes by product description or name, with no stated need for broad filesystem, database, or system resource access. Because it runs locally, there is some theoretical process-level data exposure, but the materials provide no concrete evidence of local file read/write behavior or overbroad access.

The source is the official registry and there is an auditable open-source repository with updates within the last year, all of which reduce risk. Although no license is declared and community stars are low, those are maturity concerns rather than clear supply-chain red flags based on the current facts.