Context7 ↗

Context7 is an officially published MCP server from Upstash. Anomity scores its risk at 10 out of 100 (low).

Context7 fetches version-current documentation and code examples for libraries and injects them into an agent's context, so generated code matches the version you actually depend on rather than whatever was most common in training data.

It is one of the lowest-risk servers in wide use: outbound network access only, no credentials, no filesystem, no writes. The residual consideration is supply-chain shaped rather than access shaped — the server decides which documentation text lands in your model's context, and documentation is instructions. A compromised or poisoned docs source is a prompt-injection vector into every session that queries it, which is an argument for pinning to well-known libraries and reading generated code rather than trusting it.

Why this entry scored 10 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is officially published, trust adjusts the score by -40. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 10, placing it in the low band.

See the full scoring formula →