{
  "entry": {
    "kind": "mcp",
    "slug": "motherduck",
    "name": "motherduck",
    "vendor": "MotherDuck",
    "description": "",
    "website": null,
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "database:read",
      "database:write",
      "filesystem:read",
      "filesystem:write",
      "network:outbound",
      "credentials:access"
    ],
    "packaging": {
      "manager": "uvx",
      "packageName": "^(?:--from\\s+(mcp-server-motherduck)(?:@[A-Za-z0-9][\\w.+-]*|==[A-Za-z0-9][\\w.+-]*)?\\s+\\1(?:\\.exe)?|(?:mcp-server-motherduck)(?:\\.exe)?(?:@[A-Za-z0-9][\\w.+-]*|==[A-Za-z0-9][\\w.+-]*)?)(?:\\s|$)",
      "command": "uvx"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-11-01T06:35:35.322Z",
    "risk": {
      "score": 70,
      "band": "high",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "3 high-risk capabilities: database:write, filesystem:write, credentials:access",
          "contribution": 30
        },
        {
          "id": "credential-theft-risk",
          "kind": "combination",
          "label": "Credential theft risk (high)",
          "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
          "contribution": 15
        },
        {
          "id": "database-exfiltration-risk",
          "kind": "combination",
          "label": "Database exfiltration risk (high)",
          "description": "Database read combined with outbound network can exfiltrate production data.",
          "contribution": 15
        }
      ],
      "dangerousCombos": [
        {
          "id": "credential-theft-risk",
          "name": "Credential theft risk",
          "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
          "capabilities": [
            "filesystem:write",
            "credentials:access"
          ],
          "severity": "high"
        },
        {
          "id": "database-exfiltration-risk",
          "name": "Database exfiltration risk",
          "description": "Database read combined with outbound network can exfiltrate production data.",
          "capabilities": [
            "database:read",
            "network:outbound"
          ],
          "severity": "high"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "credential-theft-risk",
        "name": "Credential theft risk",
        "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
        "capabilities": [
          "filesystem:write",
          "credentials:access"
        ],
        "severity": "high"
      },
      {
        "id": "database-exfiltration-risk",
        "name": "Database exfiltration risk",
        "description": "Database read combined with outbound network can exfiltrate production data.",
        "capabilities": [
          "database:read",
          "network:outbound"
        ],
        "severity": "high"
      }
    ],
    "knownVulns": []
  }
}