Server data from the Official MCP Registry
Chess.com player profiles, stats, games, puzzles, and leaderboards. No API key. By UnClick.
Chess.com player profiles, stats, games, puzzles, and leaderboards. No API key. By UnClick.
This MCP server exposes 450+ API integrations across dozens of third-party services with significant security concerns. Multiple critical issues were identified: hardcoded API keys passed through function parameters, lack of proper credential validation, overly broad network access without scoping, and unclear authentication mechanisms. The server's architecture allows users to call any of hundreds of endpoints with minimal validation, creating a large attack surface. Permissions far exceed what is necessary for a developer tools server. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-malamutemayhem-chessdotcom": {
"args": [
"-y",
"unclick"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.