kuaidi100-mcp@0.1.3
VERIFIEDPublisher claims: "快递100推出了国内首个兼容MCP协议的物流信息服务平台—快递100 MCP Server。 快递100旗下百递云·API开放平台的核心API服务现已全面支持MCP协议。开发者简单配置即可快速接入快递查询、运费预估、智能时效预估（含全程与在途模式）等核心功能。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-05 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationsStatic findings
No findings across 1,100 lines in 14 files.
Cost to the agent
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
No advisories in OSV for kuaidi100-mcp@0.1.3 as of 1 h ago. This is the package itself, not its dependencies.