MCP, MCP server
ai.smithery/TakoData-tako-mcp
Provide real-time data querying and visualization by integrating Tako with your agents.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit e9663dd96b41.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV PERMISSION_SHELL_DECLARED SECRETS_ENV_READ OBFUSCATION_FILE_OVER_READ_CAP
Why this grade
- NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
workers/scripts/available-data-truth.ts, line 32
const r = await fetch(new URL("/api/v3/search/", BASE), { - NETWORK_UNNAMED_HOST Low
Calls a fixed host that the description does not name.
workers/scripts/available-data-truth.ts, line 32
const r = await fetch(new URL("/api/v3/search/", BASE), { - SECRETS_PATH_DOTENV Low
Mentions a .env file.
workers/scripts/panel.ts, line 50
* Load `.env` ourselves. - PERMISSION_SHELL_DECLARED Note
Runs shell commands, and the manifest or description says so.
workers/scripts/evals/skills/launch.py, line 23
r = subprocess.run([os.path.join(here, "run.sh"), rid, arm, model, prompt], capture_output=True, text=True) - SECRETS_ENV_READ Note
Reads an environment variable whose name contains KEY, SECRET, TOKEN, PASSWORD or CREDENTIAL.
workers/scripts/available-data-live.ts, line 37
const TOKEN = process.env["TAKO_API_TOKEN"]; - OBFUSCATION_FILE_OVER_READ_CAP Note
A file was over the read cap and was not fully read.
openapi/sdk.yaml, line 1
# GENERATED - do not edit; synced from the Tako monorepo.
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
workers/scripts/evals/skills/launch.py, line 23
r = subprocess.run([os.path.join(here, "run.sh"), rid, arm, model, prompt], capture_output=True, text=True)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address. can reach api.anthropic.com. The description does not name that host.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
workers/scripts/available-data-truth.ts, line 32
const r = await fetch(new URL("/api/v3/search/", BASE), {
workers/scripts/graph-related-live.ts, line 44
const r = await fetch(url, { headers: { "X-API-Key": TOKEN as string } });
workers/scripts/pair-confirm-eval.ts, line 134
const res = await fetch(url, { headers });
Show more
workers/scripts/pair-confirm-eval.ts, line 149
const res = await fetch(url, { headers });
workers/scripts/pair-confirm-eval.ts, line 177
const res = await fetch(new URL("/api/v3/search/", BASE), {
workers/scripts/panel.ts, line 362
res = await fetch("https://api.anthropic.com/v1/messages", {
workers/scripts/smoke.ts, line 150
const healthRes = await fetch(`${baseUrl}/health`);
workers/scripts/smoke.ts, line 174
const res = await fetch(`${baseUrl}/mcp/chatgpt`, {
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
workers/scripts/available-data-live.ts, line 37
const TOKEN = process.env["TAKO_API_TOKEN"];
workers/scripts/available-data-truth.ts, line 21
const TOKEN = process.env["TAKO_API_TOKEN"];
workers/scripts/panel.ts, line 50
* Load `.env` ourselves.
Show more
workers/scripts/golden.ts, line 36
const apiToken = process.env.TAKO_GOLDEN_API_TOKEN ?? process.env.TAKO_SMOKE_API_TOKEN;
workers/scripts/graph-related-live.ts, line 26
const TOKEN = process.env["TAKO_API_TOKEN"];
workers/scripts/pair-confirm-eval.ts, line 120
const TOKEN = process.env["TAKO_API_TOKEN"];
workers/scripts/panel.ts, line 94
const staging = process.env.TAKO_STAGING_API_KEY;
workers/scripts/panel.ts, line 95
const prod = process.env.TAKO_PROD_API_KEY;
workers/scripts/panel.ts, line 329
const apiKey = process.env.ANTHROPIC_API_KEY;
workers/scripts/panel.ts, line 52
* Nothing in this repo sources `.env` for a plain `npm run` — wrangler reads its
workers/scripts/panel.ts, line 54
* in `.env` reached this process only if you remembered to export it by hand,
workers/scripts/panel.ts, line 63
for (const candidate of [join(HERE, "..", "..", ".env"), join(HERE, "..", ".env")]) {
workers/scripts/panel.ts, line 333
"ANTHROPIC_API_KEY is not set. Add it to .env at the repo root and restart the panel (the panel reads .env itself). Raw mode works without it.",
workers/scripts/panel.ts, line 393
? "That key was rejected. Check ANTHROPIC_API_KEY in .env — a Console key starts with `sk-ant-`."
workers/scripts/panel.ts, line 606
return originalEnv.has(name) ? "from environment" : "from .env";
workers/scripts/panel.ts, line 619
? ` .env loaded: ${loadedEnvFiles.join(", ")}`
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
openapi/sdk.yaml, line 1
# GENERATED - do not edit; synced from the Tako monorepo.
workers/scripts/evals/web-snippet/results/raw-2026-07-31-full.jsonl, line 1
{"id":"nvda-datacenter-rev","query":"nvidia data center revenue latest quarter","expect":"highlights-favoured","probes":"IR press release — the upstream PR's own worked example","s
workers/scripts/evals/web-snippet/results/raw-2026-07-31.jsonl, line 1
{"id":"nvda-datacenter-rev","query":"nvidia data center revenue latest quarter","expect":"highlights-favoured","probes":"IR press release — the upstream PR's own worked example","s
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit e9663dd96b41. requests shell access. The manifest names this permission. can reach a host that is not written as a fixed address. can reach api.anthropic.com. The description does not name that host. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: e9663dd96b41921ef7adeb18af45514ef98767cc
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.