oci-pricing-mcp

The material explicitly states that no keys or environment variables are required, and there is no indication that users must provide cloud credentials, API tokens, or other sensitive secrets, so credential exposure risk appears low.

Although no remote endpoint is declared, the described functionality includes 'real-time pricing queries,' which commonly implies runtime access to Oracle or related pricing data sources; the material does not specify domains, transmitted content, or whether user queries are sent out, so actual network behavior should be verified.

The system checks indicate that this tool executes code. For an MCP tool, running a local service process is a normal capability, but the material does not disclose what system commands or subprocesses it may invoke, so it should be run in a constrained environment.

The material does not specify which local files, caches, or configuration data it reads or writes, and there is no explicit sign of excessive permission requests. Because it is a runnable MCP tool, it is prudent to assume at least ordinary local access within its runtime context and review the implementation details.

Positive factors include an open-source repository and an MIT license, making the code theoretically auditable and lowering risk; however, it comes from a third-party registry, has 0 stars, and an unknown maintenance status, so trust remains limited and the code and dependencies should be reviewed.