Is Poof MCP safe to give an agent?

A factual risk summary built from Poof’s real tool surface, execution model, and verification history — not a vibe.

Only read-style tools observed — no write/destructive tools.

Runs on the vendor's infrastructure; you connect over the network. No untrusted code runs on your machine, but you grant the hosted service access.

Installs via npx (`npx -y @poof-bg/mcp`) — it pulls and executes third-party code; pin versions and review the source.

No write or destructive tools observed. Absence of a scope isn’t a guarantee — treat unconfirmed access as unknown, not “none.”