io.github.malkreide/swiss-electricity-mcp

The materials explicitly state that no keys or environment variables are required. There is no indication that API tokens, account credentials, or other sensitive secrets are needed, so credential leakage and abuse risk appears low.

Although no remote endpoints are declared, the described functionality involves BFE dashboard data, ElCom tariffs, and public consumption data, so it may reasonably access related public data sources. The materials do not disclose exact hosts, transmitted content, or whether user input is sent out, so network transparency is limited and warrants caution.

The system checks indicate that it executes code, meaning it runs local process logic as an MCP tool. The available materials do not show requests for system permissions beyond its stated purpose, and there are no clear red flags of malicious execution, but local execution itself warrants caution.

The description only mentions electricity dashboard, tariff, and public consumption data, without specifying which local files, databases, or other resources it reads or writes. Because documentation is missing, the data-access boundary cannot be confirmed; there is no clear evidence of overbroad access, but visibility is limited.

The source is an official registry entry, with an auditable open-source repository and updates within the last year, all of which are strong positive signals. Community adoption is low and the license is not declared, which adds some uncertainty, but not enough to constitute a high-risk supply-chain red flag.