Icdwise MCP Server

icdwise is a well-architected, security-conscious MCP server for ICD-10-CM code lookup. The codebase demonstrates strong fundamentals: no authentication required (appropriate for a stateless, public data service), no network exfiltration, proper input validation, and clear separation of concerns. The server bundles public-domain medical data and exposes it safely through three narrowly-scoped tools. No hardcoded secrets, no dangerous operations, and comprehensive test coverage. The only minor findings are code-quality notes that do not materially affect security. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

7 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.