Mmcp.market

Is Chocolatey MCP server safe?

Probably. Read the findings first.

C65/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Chocolatey does

  • HasData Yelp
    Yelp business search, place details and the full review feed, as structured JSON.
    A
  • Earthquake
    Search USGS and EMSC seismic data — real-time feeds, event queries, and earthquake counts.
    A
  • Free Search
    No-API-key web search, page fetching and document reading across many engines. Local-first.
    B

Chocolatey reviews, tools and install