@tokenizin/mcp-npx-fetch

Independent MCP server safety profile · methodology

Caution · safety score 60/100
—npm downloads/wk
19mosince last publish
v1.0.0latest version
—provenance

Safety signals

Install script (code on npm i)no
Repository (source to review)https://github.com/tokenizin-agency/mcp-npx-fetch
LicenseMIT
Direct dependencies4
Last audited2026-07-09

Flags

mediumНе публиковался 19 мес — возможно заброшен/несовместим с новой MCP-спецификацией.
lowМало загрузок — новый или невостребованный; меньше глаз проверяло.
Verify @tokenizin/mcp-npx-fetch live right now — free: GET /mcp/verify?package=%40tokenizin%2Fmcp-npx-fetch. See the whole ecosystem in the State of MCP Security report, or browse all audited servers.

Ставить с осторожностью — проверь исходник/поддержку. Data from PulseFeed's independent MCP audit (last crawl 2026-07-09). An install script is not automatically malicious — native builds use them — but each is an unreviewed code-execution vector worth checking. All audited MCP servers →