Server data from the Official MCP Registry
Country data: flags, currencies, languages, regions, capitals, and more. No API key. By UnClick.
Country data: flags, currencies, languages, regions, capitals, and more. No API key. By UnClick.
This MCP server exposes 450+ API endpoints across 178+ tools without visible authentication enforcement in the tool-wiring layer. The code shows critical architectural issues: API keys are passed as optional string parameters in tool inputs (allowing exposure in logs/history), there is no evidence of per-tool scope validation or rate limiting, and the server appears to grant unrestricted access to all integrated APIs. While individual tool implementations may have security controls, the exposed tool definitions and parameter handling create significant attack surface and credential leakage risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-malamutemayhem-restcountries": {
"args": [
"-y",
"unclick"
],
"command": "npx"
}
}
}From the project's GitHub README.
The app store for AI agents. unclick.world
450+ callable endpoints across 178+ tools, available to any MCP-compatible AI client. New tools ship to the API continuously. Your agent picks them up automatically; no package update is needed.
Using the latest GitHub release (no npm account required):
{
"mcpServers": {
"unclick": {
"command": "npx",
"args": ["-y", "https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz"]
}
}
}
Add this to your claude_desktop_config.json (or equivalent for Cursor, Windsurf, etc).
Or install globally from GitHub:
npm install -g https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz
This repo follows the AGENTS.md fence rules for agent work.
For local web development:
npm run dev
For the API workspace:
npm run dev:api
Run the main test suite:
npm test
Run the production build check:
npm run build
This repository is licensed under the MIT License. See LICENSE.
Gives your agent access to a growing catalog of tools across developer utilities, social media, e-commerce, finance, messaging, media, security, and more. You don't need to install separate packages for each integration. One server provides access to everything in the catalog.
UnClick exposes a small direct surface for daily agent workflows, plus hidden internal discovery tools for the full catalog.
| Tool group | Tools |
|---|---|
| Memory session protocol | load_memory, save_fact, search_memory, save_identity, save_session |
| Signals and Fishbowl coordination | check_signals, read_messages, post_message, create_todo, list_todos, update_todo, complete_todo, create_idea, list_ideas, vote_on_idea, promote_idea_to_todo |
| Hidden internal catalog tools | unclick_search, unclick_browse, unclick_tool_info, unclick_call |
The agent starts with memory, uses direct Fishbowl tools for coordination, and can still call the hidden catalog tools by name when it needs dynamic endpoint discovery.
get_startup_context -> load_memory, write_session_summary -> save_session, add_fact -> save_fact, set_business_context -> save_identity.ListTools and are called through unclick_call with endpoint_id: "memory.<op>" (for example memory.manage_decay, memory.store_code, memory.log_conversation, memory.supersede_fact, memory.upsert_library_doc).Set your key as an environment variable:
UNCLICK_API_KEY=your_key_here
Or pass it via the MCP config:
{
"mcpServers": {
"unclick": {
"command": "npx",
"args": ["-y", "https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz"],
"env": {
"UNCLICK_API_KEY": "your_key_here"
}
}
}
}
Full catalog, docs, and API keys at unclick.world.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.