io.github.malkreide/swisstopo-mcp

The material explicitly states that no keys or environment variables are required, and no API key, token, or other sensitive credential is requested; based on the provided information, credential leakage or abuse risk appears low.

The description indicates Swiss federal geodata features such as geocoding, STAC, WMTS, and OEREB, which normally imply access to external geodata services; however, the material does not list specific remote hosts, so the egress targets and scope are not fully transparent and should be verified before deployment.

System checks indicate that this tool executes code; as an MCP tool, this typically means starting a local service process or running local code. This is a normal capability for this type of tool, and the provided material shows no request for privileges clearly beyond its stated functionality.

The available material does not state any need to read or write local files, databases, or other sensitive resources, and it does not indicate overly broad data access; based on known facts, no obvious data access expansion is shown.

Positive indicators include an official registry source, an auditable open-source repository, and updates within the last year; these materially reduce supply-chain risk. Points to note are the low community adoption (0 stars) and no declared license, which mean ecosystem validation and usage constraints remain limited, so source and dependency review is still advisable before adoption.