Clear MCP

The material states no environment variables or keys are required, and there is no indication that users must supply a long-lived API key directly. However, because it connects a Clear account via Brazil's Open Finance, real use will likely involve account authorization tokens or session credentials, which would be sensitive if misused.

The tool is known to access the remote endpoint api.mcp.ai. Based on its stated purpose, financial information such as balances, statements, cards, and investments may be transmitted through that endpoint; this is ordinary network egress for the declared function, and the materials do not show a red flag such as unrelated or unknown third-party destinations.

The system checks indicate this tool has executes-code capability, meaning it can launch local processes or execute code. This is a common MCP capability, but the lack of a README leaves its exact scope, subprocess behavior, and system boundaries insufficiently documented.

Per the description, its main access scope is Clear/Open Finance financial data, including balances, statements, cards, and investments, which is highly sensitive. The materials do not indicate broad local file access or extra data permissions that are clearly disproportionate to the stated function.

Positive signals include an official registry source, an auditable open-source repository, and updates within the last year, all of which materially reduce supply-chain risk. Caution remains because the README is absent, the license is undeclared, and community adoption is very low (0 stars), leaving limited audit context and maturity evidence.