Indian Regulatory Data

The materials state that no keys or environment variables are required. No API token, account password, or other sensitive credential is requested, so credential exposure and misuse risk appears low.

The tool connects to the remote endpoint indian-regulatory-mcp.atlasword.workers.dev to retrieve regulatory data, which is a standard network-egress scenario. The materials do not describe transmitted fields or logging policy, so user query content should be assumed to potentially reach that service.

The system checks indicate an executes-code capability, meaning it likely runs code/processes locally as a normal MCP tool. The provided materials do not show requests for unusual system privileges or clearly unrelated dangerous operations, so this alone is not a high-risk red flag.

As an MCP tool, it will typically handle user queries and returned results, but no README is provided, so it is unclear whether it reads local files, caches data, or accesses other resources. No obvious overbroad access is described, but transparency is limited, so least-privilege use is advisable.

It comes from an official registry and provides an open-source repository with updates within the last year, which are strong risk-reducing signals. Although community stars are low and the license is not declared, the supply-chain risk is still broadly manageable due to source credibility and auditability.