MediaWiki MCP Server

The materials list environment variables such as MCP_OAUTH_CREDENTIALS_FILE and CONFIG, indicating possible use of an OAuth credentials file and runtime configuration. These credentials are inherently sensitive and could leak if file permissions or logging are mishandled, but the materials do not show an explicit credential-abuse design.

The description says it can interact with any MediaWiki wiki, which implies outbound network requests to user-configured MediaWiki sites. No fixed remote host is listed in the provided materials, and there is no evidence of data being sent to unrelated or unknown endpoints, though user content may be transmitted to the target wiki as part of normal functionality.

The system flags this tool as executes-code, meaning it runs a local service process. Based on the available materials, this is a normal local execution capability for an MCP server, with no indication of requesting system privileges beyond its stated purpose or any suspicious execution chain.

The environment variables indicate it reads local configuration and OAuth credential files and handles content and upload size parameters, suggesting access to local config data and wiki content passed through the tool. The materials do not show any demand for broad filesystem access or data permissions unrelated to its function.

It is sourced from an official registry and has an auditable open-source repository with updates within the last year, all of which are strong positive signals. Although the community star count is low and the license is not stated here, that alone is not enough to make it high risk, so the overall supply-chain risk is relatively low.