# MiniMax MCP Server

> MiniMax MCP Server is an officially published MCP server from MiniMax. Anomity scores its risk at 45 out of 100 (medium). It matches 1 dangerous capability combination.

- **Canonical URL:** https://catalog.anomity.ai/mcp/minimax-mcp-server
- **Kind:** MCP server
- **Publisher:** MiniMax
- **Trust level:** official
- **Risk score:** 45/100 (medium)
- **Website:** https://www.minimax.io
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/mcp/minimax-mcp-server

## Description

MiniMax's official server exposes text-to-speech, image generation, and video generation to agents, so a model can produce media assets as part of a workflow rather than describing them.

Capabilities are outbound network access, credential access, and filesystem writes for generated files. The considerations are generation-shaped rather than access-shaped: an agent that can produce synthetic video and audio autonomously is a capability worth governing by policy, and generated files landing on disk should go somewhere predictable rather than wherever the agent chose.

## Why it scored 45

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |
| 2 high-risk capabilities: credentials:access, filesystem:write | +20 | critical |  |
| Credential theft risk (high) | +15 | high | Filesystem write combined with credentials access can plant persistent credential stealers. |

Clamped result: **45/100**, band **medium**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |
| `credentials:access` | Credentials access | Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment. |
| `filesystem:write` | Filesystem write | Can create, edit, or delete files on the host system. High-impact capability — anything from helpful edits to planting persistence. |

## Dangerous combinations matched

### Credential theft risk (high)

Filesystem write combined with credentials access can plant persistent credential stealers.

Capabilities: `filesystem:write`, `credentials:access`

## Related MCP servers

- [ElevenLabs MCP Server](https://catalog.anomity.ai/mcp/elevenlabs-mcp-server) — risk 45 (medium)
- [Blender MCP](https://catalog.anomity.ai/mcp/blender-mcp) — risk 100 (critical)
- [Airtable MCP Server](https://catalog.anomity.ai/mcp/airtable-mcp-server) — risk 45 (medium)
- [Cloudflare MCP Server](https://catalog.anomity.ai/mcp/cloudflare-mcp-server) — risk 45 (medium)
- [MongoDB MCP Server](https://catalog.anomity.ai/mcp/mongodb-mcp-server) — risk 45 (medium)
- [Neon MCP Server](https://catalog.anomity.ai/mcp/neon-mcp-server) — risk 45 (medium)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json