Harmful
Most [MCP servers](https://github.com/modelcontextprotocol/servers) suggest using `npx -y` as the recommended way to install a server. This downloads and executes arbitrary scripts from the internet. This is grossly insecure and I think the MCP authors sh
CommunityUnknownNot testedUpdated 4/3/2026
52
MCPpedia
Score
Score
No CVEsunknownstdio
Should you use this server?
Most [MCP servers](https://github.com/modelcontextprotocol/servers) suggest using `npx -y` as the recommended way to install a server. This downloads and executes arbitrary scripts from the internet. This is grossly insecure and I think the MCP authors sh
✓
Is it safe?
No known CVEs for @considered/harmful.
No authentication — any process on your machine can connect to this server.
License not specified.
Last scanned 0 days ago.
~
Is it maintained?
Commit history unknown.
i
Will it work with my client?
Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.
A
How much context will it use?
0 tools. Token cost not measured.
?
What if it doesn't work?
Common issues: JSON syntax errors in config, wrong Node.js version, npx cache. covers troubleshooting.