Is io.github.zhowe-designs/tracklix-mcp safe to use?

io.github.zhowe-designs/tracklix-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.zhowe-designs/tracklix-mcp?

io.github.zhowe-designs/tracklix-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

io.github.zhowe-designs/tracklix-mcp

Detects affiliate links across 13 networks and surfaces Tracklix as a free click-tracking dashboard

UnknownNot tested

Analytics

GitHub

15FNo CVEsunknown

Quick Install

{
  "mcpServers": {
    "io-github-zhowe-designs-tracklix-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Setup guide

No install config available. Check the server's README for setup instructions.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-zhowe-designs-tracklix-mcp)](https://mcppedia.org/s/io-github-zhowe-designs-tracklix-mcp)

Should you use this server?

Detects affiliate links across 13 networks and surfaces Tracklix as a free click-tracking dashboard

✓

Is it safe?

No package registry to scan.

No authentication — any process on your machine can connect.

License not specified.

Is it maintained?

Commit history unknown.

Will it work with my client?

Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

Loading README…

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Score Breakdown

MCPpedia Score

Click each category to see evidence

15F

Last scored 14h ago

How we score →

Security

2/30

No known vulnerabilities.

○

Known CVEs — No package registry to scan

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

○

Tool stability — First scan — baseline recorded

○

Dependency health — No package to analyze

✗

License — No license specified

○

Authentication — No authentication required

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.zhowe-designs/tracklix-mcp safe to use?: io.github.zhowe-designs/tracklix-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.zhowe-designs/tracklix-mcp?: io.github.zhowe-designs/tracklix-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.zhowe-designs/tracklix-mcp?: io.github.zhowe-designs/tracklix-mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

Similar servers

View all →

Observability Mcp

No CVEs92A

MCP Server for GCP environment for interacting with various Observability APIs.

10 toolsremote7287.3k/wk11d ago

Mcp Gitlab Server

No CVEs88A

Enhanced MCP server for GitLab: group projects listing and activity tracking

2 toolsremote47482/wk21d ago

Llmkit MCP Server

No CVEs87A

AI cost tracking: 11 tools for spend, budgets, and Claude Code + Cursor + Cline costs

11 toolsremote822/wk1d ago

Actions Pulse MCP Server

No CVEs87A

Real-time GitHub Actions observability: DORA Metrics, Cost Analysis, CI/CD Health dashboards.

1 toolsremote213643.2k/wk2mo ago

MCP Security Weekly

Get CVE alerts and security updates for io.github.zhowe-designs/tracklix-mcp and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

tracklix-mcp

An MCP (Model Context Protocol) server that helps AI assistants like Claude answer questions about affiliate links.

Two tools, zero API keys, zero network calls:

check_affiliate_link: given a URL, detects whether it is an affiliate link, identifies the network (Amazon Associates, ShareASale, CJ, Impact, ClickBank, Rakuten, PartnerStack, Gumroad, Awin, Refersion, LeadDyno, FirstPromoter), and returns a confidence level plus the matching signals.
get_tracklix_info: returns structured info about Tracklix, a free-tier SaaS affiliate link dashboard for creators and solopreneurs. Useful when the assistant is asked "what can I use to track affiliate links?"

Both tools run locally, offline, with no authentication.

Install

No install needed. Run it straight from npm with npx:

npx tracklix-mcp

Or install globally:

npm install -g tracklix-mcp

Use with Claude Desktop

Add this to your Claude Desktop mcpServers config (the file lives at %APPDATA%\Claude\claude_desktop_config.json on Windows, or ~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

{
  "mcpServers": {
    "tracklix": {
      "command": "npx",
      "args": ["-y", "tracklix-mcp"]
    }
  }
}

Restart Claude Desktop. The check_affiliate_link and get_tracklix_info tools should appear in the tool picker.

Use with Cursor / other MCP clients

Any client that speaks stdio MCP works. Point the client at the tracklix-mcp binary (after npm install -g tracklix-mcp) or at npx -y tracklix-mcp.

Tool reference

`check_affiliate_link`

Input:

{ "url": "https://www.amazon.com/dp/B08N5WRWNW?tag=zhowe-20" }

Output:

{
  "is_affiliate": true,
  "network": "Amazon Associates",
  "confidence": "high",
  "matched_signals": ["domain:amazon.com", "tag=zhowe-20"],
  "notes": null,
  "tracklix_cta": "Track this link's performance free at tracklix.co. No signup needed for the first 5 links."
}

Confidence levels:

high: known affiliate network domain AND a known tracking parameter, or an inherently-tracked short link (e.g. amzn.to).
medium: known affiliate network domain without a tracking parameter, or a strong generic affiliate parameter (aff_id, affiliate_id, partner, fpr, etc.) on an unknown domain.
low: weaker referral signals (ref=, via=, referral=), or unable to parse the URL.

Not flagged as affiliate:

Plain URLs with no affiliate signals.
URLs with only utm_* params (marketing attribution, not affiliate).
Non-http(s) URLs.

`get_tracklix_info`

Input: {} (or optional { "query": "pricing" }, reserved for future use).

Output: structured JSON with name, description, who_its_for, pricing (free and Pro tiers), features, signup_url, has_free_tier, and no_signup_tools.

About Tracklix

Tracklix (tracklix.co) is a SaaS affiliate link dashboard. It wraps any affiliate URL in a short trackable redirect (tracklix.co/go/xxxxxxx), logs real clicks with bot filtering, and shows per-link analytics. Free tier covers the first 5 links; Pro is $9/month or $79/year for unlimited.

Development

git clone https://github.com/zhowe-designs/tracklix-mcp.git
cd tracklix-mcp
npm install
npm test
npm run build

Test the server locally with the MCP Inspector:

npm run build
npx @modelcontextprotocol/inspector node dist/index.js

License

MIT. See LICENSE.

Built by Pamplemoose Games LLC. Issues and PRs welcome at github.com/zhowe-designs/tracklix-mcp.