Trends MCP Server

The Trends MCP stdio adapter is a small, readable wrapper that forwards three read-only tool calls over HTTPS to the vendor's own API using a Bearer key read from the TRENDSMCP_API_KEY environment variable. It has no shell execution, no file access, no hardcoded secrets, and no data exfiltration paths beyond the keyword and parameter values the user intentionally sends to the vendor API. Minor items are limited to a rate-limit/quota note and a few code-quality suggestions, such as the unhandled JSON parsing of responses and the lack of an explicit check on the response body type. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity).

5 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.