ToolProof Trust Profile

ai-explorium-mcp-explorium

High-impact capability. Restrict to sandbox/test resources and avoid production credentials.

100risk score

Connect With Limitsconnection signal

install_chainrisk type

57evidence score

Source: https://github.com/explorium-ai/mcp-explorium
Registry: ai.explorium/mcp-explorium 1.0.1

Connection signal

High-impact capability. Restrict to sandbox/test resources and avoid production credentials.

Observed tools

None observed in this static profile.

Top findings

References credential or secret pattern: API_KEY_GENERIC — entrypoint.sh:3
Install risk pattern: unpinned_dependency — package-lock.json:16

Recommended controls

Install in a sandbox before team or production use.
Pin the exact package/repository version.
Review install scripts, Dockerfile behavior, and dependency pins.
Do not use production credentials during first install.
Restrict filesystem, repository, cloud, and database scope.
Require human approval for destructive actions.