mcp-medlineplus

The materials explicitly state that no keys or environment variables are required, and there is no indication that it handles API tokens, account credentials, or other highly sensitive authentication data, so credential exposure appears limited.

The description says it provides access to NIH MedlinePlus information, which functionally implies sending queries to the relevant medical information service; although no specific host is declared and no unrelated egress endpoint is shown, user queries may still be transmitted over the network to that service.

The objective checks flag it as executes-code, meaning this MCP tool runs locally as a process/code; this is a normal capability for such tools, and the materials show no red flags of requesting unusual system privileges or performing unrelated execution.

The available materials do not state any need to read or write local files or access databases, browsers, cloud drives, or other sensitive resources; based on the description, its core function is health information search, with no visible signs of excessive data access.

There is a public GitHub repository and an MIT open-source license, which are positive for auditability; however, it comes from a third-party registry, has only 0 stars, and its maintenance status is unknown, so supply-chain trust is moderate and the repository contents and recent commits should be checked before installation.