mcp-wikifeed

The materials explicitly state that no keys or environment variables are required. There is no indication of API tokens, account credentials, or other sensitive authentication material, so credential leakage and misuse risk appears low.

The description says it wraps the Wikimedia Feed API, so it can reasonably be inferred that it makes network requests to Wikimedia-related endpoints to fetch featured articles, most-read articles, and picture of the day. No specific hosts are listed and there is no evidence of exfiltration to unrelated third parties, but normal outbound network access is part of its operation.

The system checks mark this tool as executes-code, meaning it runs code/processes locally. Based on the available materials, there is no evidence of system capabilities beyond its stated purpose, but local execution should still be treated with normal caution.

The materials do not state any need to read or write local files, databases, clipboard contents, or other sensitive resources. Its described function is limited to retrieving public Wikimedia content, with no clear sign of excessive data access.

Positive signals include that it is open source under the MIT License and therefore auditable. However, it comes from a third-party registry, has 0 stars, and an unknown maintenance status, so trust and ongoing maintenance signals are weak and dependency/maintenance risk should be watched.