Unclick MCP Server

This MCP server exposes 450+ callable endpoints across numerous third-party APIs (gaming, finance, commerce, security, social media, etc.). While the architecture is well-organized and permissions are documented, there are significant concerns around broad API access without apparent scope limitation, missing input validation patterns in many tool definitions, and potential for unintended data exposure through the flexible tool-calling mechanism. Users should carefully audit which tools they enable and understand that this server can access sensitive APIs (financial, security scanning, personal data) with user-supplied credentials. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).

4 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.