MCP Brasil API

The materials explicitly state that no keys or environment variables are required, and there is no indication that API tokens, account credentials, or other sensitive secrets are needed, so credential exposure appears low.

The tool is described as querying Brazilian public data such as CEP, CNPJ, exchange rates, banks, and holidays, which typically implies outbound network requests; however, no specific remote endpoints are disclosed, so it is not possible to verify where data is sent or whether it only contacts relevant public APIs.

The system checks indicate that it executes code; as an MCP tool, this means it runs a local service or process. The available materials do not disclose its exact system capabilities, but code execution alone is an inherent property of such tools and supports a caution rating rather than a high-risk one.

The description only states that it queries public data and does not claim access to local files, databases, or other sensitive resources; however, with no README available, the actual data access scope cannot be confirmed, so the source and runtime permissions should be reviewed before use.

Positive factors include a public GitHub repository and an MIT open-source license, making the code theoretically auditable; however, it comes from a third-party registry, has 0 stars, and has unknown maintenance status, so trust remains limited and the implementation and dependencies should be reviewed directly.