MuAPI Claude Code MCP Server

The material explicitly states that no keys or environment variables are required. There is no indication that users must provide API keys, tokens, or other sensitive credentials, so credential exposure appears limited.

Although the material declares no remote endpoints, the described features—model discovery, generation, and prediction tracking—could reasonably involve network interaction. The current documentation is insufficient to confirm zero data egress, so outbound connections should be monitored in practice.

The objective checks mark this tool as capable of executing code, which indicates it may spawn local processes or run code on the host. This is a common high-privilege capability for MCP tools and does not alone justify a high-risk rating, but it should be run in a restricted environment.

Its claimed image/video generation and editing features typically imply reading and writing local media files. However, the material does not specify directory scope, whether existing files may be modified, or whether other workspace resources are accessed, leaving data access boundaries unclear.

A positive factor is that there is an open-source repository available for review. However, it comes from a third-party registry, has no declared license, zero stars, unknown maintenance status, and no README, so supply-chain transparency and maturity are limited; source and dependencies should be reviewed before use.