Server data from the Official MCP Registry
Music charts, artist info, similar artists, and top tracks from Last.fm. By UnClick.
Music charts, artist info, similar artists, and top tracks from Last.fm. By UnClick.
The UnClick MCP server exposes 450+ third-party API integrations with a centralized authentication model via UNCLICK_API_KEY. While the server itself has reasonable code structure, multiple concerns emerge: (1) reliance on third-party tool implementations without visible security review, (2) overly broad network and environment variable permissions that could enable lateral attacks, (3) no input validation visible in the tool-wiring schema definitions, and (4) potential for credential leakage through environment variable access. The server's design as an "app store for AI agents" with dynamic tool discovery increases attack surface. Users should be aware that compromising the API key or the local environment exposes access to all integrated services simultaneously. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-malamutemayhem-lastfm": {
"args": [
"-y",
"unclick"
],
"command": "npx"
}
}
}From the project's GitHub README.
The app store for AI agents. unclick.world
450+ callable endpoints across 178+ tools, available to any MCP-compatible AI client. New tools ship to the API continuously. Your agent picks them up automatically; no package update is needed.
Using the latest GitHub release (no npm account required):
{
"mcpServers": {
"unclick": {
"command": "npx",
"args": ["-y", "https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz"]
}
}
}
Add this to your claude_desktop_config.json (or equivalent for Cursor, Windsurf, etc).
Or install globally from GitHub:
npm install -g https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz
This repo follows the AGENTS.md fence rules for agent work.
For local web development:
npm run dev
For the API workspace:
npm run dev:api
Run the main test suite:
npm test
Run the production build check:
npm run build
This repository is licensed under the MIT License. See LICENSE.
Gives your agent access to a growing catalog of tools across developer utilities, social media, e-commerce, finance, messaging, media, security, and more. You don't need to install separate packages for each integration. One server provides access to everything in the catalog.
UnClick exposes a small direct surface for daily agent workflows, plus hidden internal discovery tools for the full catalog.
| Tool group | Tools |
|---|---|
| Memory session protocol | load_memory, save_fact, search_memory, save_identity, save_session |
| Signals and Fishbowl coordination | check_signals, read_messages, post_message, create_todo, list_todos, update_todo, complete_todo, create_idea, list_ideas, vote_on_idea, promote_idea_to_todo |
| Hidden internal catalog tools | unclick_search, unclick_browse, unclick_tool_info, unclick_call |
The agent starts with memory, uses direct Fishbowl tools for coordination, and can still call the hidden catalog tools by name when it needs dynamic endpoint discovery.
get_startup_context -> load_memory, write_session_summary -> save_session, add_fact -> save_fact, set_business_context -> save_identity.ListTools and are called through unclick_call with endpoint_id: "memory.<op>" (for example memory.manage_decay, memory.store_code, memory.log_conversation, memory.supersede_fact, memory.upsert_library_doc).Set your key as an environment variable:
UNCLICK_API_KEY=your_key_here
Or pass it via the MCP config:
{
"mcpServers": {
"unclick": {
"command": "npx",
"args": ["-y", "https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz"],
"env": {
"UNCLICK_API_KEY": "your_key_here"
}
}
}
}
Full catalog, docs, and API keys at unclick.world.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.