Server data from the Official MCP Registry
Australian Business Number lookup and business name search. By UnClick.
Australian Business Number lookup and business name search. By UnClick.
This MCP server exposes 450+ API endpoints with significant security concerns. The code is truncated, making full analysis impossible, but critical issues are evident: API keys are passed as optional parameters in tool schemas (enabling logging/exfiltration), the server requires UNCLICK_API_KEY without validation visible, and permissions are extremely broad (network_http for numerous third-party APIs including financial, security, and social platforms). The architecture creates a high-risk aggregation point where compromised credentials or malicious API responses could affect many downstream services. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-malamutemayhem-abn": {
"args": [
"-y",
"unclick"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.