Back to Browse

Vox Pop MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Search 9 public discussion platforms for real opinions. Semantic routing, no API keys required.

About

Search 9 public discussion platforms for real opinions. Semantic routing, no API keys required.

Security Report

4.2
Use Caution4.2High Risk

vox-pop is a well-intentioned opinion aggregation MCP server that correctly implements optional authentication, uses appropriate data sources (public APIs only), and handles credentials securely via environment variables. However, there are notable issues: sensitive API keys are sent over the network in plaintext without validation of HTTPS endpoints, query text (up to 4000 chars) is sent to third-party LLM APIs without explicit user consent per request, user input validation is weak (allowing arbitrary query text), and error handling logs could inadvertently expose sensitive data. The server's permissions (network_http, env_vars, file_read/write) are appropriate for its purpose, but the implementation introduces moderate security risks through credential handling and data transmission practices. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

4 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mushfique-dgist-vox-pop": {
      "args": [
        "vox-pop"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!