Server data from the Official MCP Registry
Lichess player profiles, games, daily puzzle, top players, and tournaments. By UnClick.
Lichess player profiles, games, daily puzzle, top players, and tournaments. By UnClick.
This MCP server exposes 450+ API integrations with minimal authentication guardrails and dangerous credential handling patterns. Critical findings include API keys passed as tool input parameters (enabling exfiltration), hardcoded API key references throughout tool wiring, and overly broad network permissions across unvetted third-party APIs. The server requires an UNCLICK_API_KEY but does not validate or scope which tools users can call, creating privilege escalation risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-malamutemayhem-lichess": {
"args": [
"-y",
"unclick"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.