Energi Data Dk

The material explicitly states that no keys or environment variables are required. No API key, OAuth token, or other sensitive credential is requested, so credential leakage and abuse risk appears low.

The tool is declared to access the remote endpoint gateway.pipeworx.io. Remote connectivity is a normal capability for this type of tool, but the material does not explain whether user prompts or other local data are transmitted, so egress transparency is limited and warrants caution.

System checks indicate that it executes code / runs a local process, which is a standard MCP behavior. The available material does not show requests for unusual system privileges or operations clearly unrelated to its stated purpose, so this is caution rather than high risk.

The material does not specify which local files, directories, or other resources it reads or writes, and it does not explicitly indicate overbroad permissions. However, as a locally running MCP process, its effective access depends on the host user's privileges; the undocumented scope warrants caution.

Positive signals include an official registry source, an auditable open-source repository, and updates within the last year, all of which materially reduce supply-chain risk. However, the README is absent, the license is undeclared, and community adoption is minimal (0 stars), so external validation remains limited and the appropriate rating is caution.