Atlas / MCP servers / altrr2 / Yandex Tools

Yandex ToolsBLOCK

Name: Yandex Tools
Author: altrr2

mcp/altrr2/yandex-tools

MCP server by altrr2 · Audited 2026-10-08

⚑ Report / re-scan Source ↗

Verdict

BLOCK

Grade

Trust score

59 /100

Exposed tools

101 92r · 8w · 1d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

MCP servers for Yandex APIs — search, keyword research, webmaster tools, and web analytics for the Russian market.

English | Русский

English

Packages

Quick Start

Yandex Wordstat v2 (keyword research) — Yandex Cloud Search API; uses the same key as Search:

{
"mcpServers": {
"yandex-wordstat": {
"command": "npx",
"args": ["-y", "yandex-wordstat-mcp"],
"env": {
"YANDEX_SEARCH_API_KEY": "your_api_key",
"YANDEX_FOLDER_ID": "your_folder_id"
}
}
}
}

Prefer a hosted tool? Use the managed endpoint at unoapi.ru/services/wordstat — no Yandex Cloud credentials to manage.

**Yandex Se

Read from source at commit a6ad56709fd2OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add yandex-wordstat-mcp --env YANDEX_CLIENT_SECRET=${YANDEX_CLIENT_SECRET} --env YANDEX_DIRECT_TOKEN=${YANDEX_DIRECT_TOKEN} --env YANDEX_METRIKA_TOKEN=${YANDEX_METRIKA_TOKEN} --env YANDEX_SEARCH_API_KEY=${YANDEX_SEARCH_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "yandex-wordstat-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "YANDEX_CLIENT_SECRET": "${YANDEX_CLIENT_SECRET}",
        "YANDEX_DIRECT_TOKEN": "${YANDEX_DIRECT_TOKEN}",
        "YANDEX_METRIKA_TOKEN": "${YANDEX_METRIKA_TOKEN}",
        "YANDEX_SEARCH_API_KEY": "${YANDEX_SEARCH_API_KEY}"
      }
    }
  }
}

Exposed tools (101)

92 read · 8 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`add-keywords`	write
`create-adgroup`	write
`create-campaign`	write
`create-text-ad`	write
`delete-adgroup`	destructive
`dynamics`	read
`get-audience-interests`	read
`get-balance`	read
`get-bounce-by-devices-organic`	read
`get-bounce-comparison-search-engines`	read
`get-bounce-device-search-engine`	read
`get-broken-internal-links`	read
`get-broken-internal-links-history`	read
`get-campaign`	read
`get-conversions-by-devices`	read
`get-conversions-by-landing-pages`	read
`get-conversions-by-regions`	read
`get-conversions-by-search-engine`	read
`get-conversions-by-search-phrases`	read
`get-conversions-device-region`	read
`get-counter`	read
`get-counters`	read
`get-critical-pages`	read
`get-demographics-organic`	read
`get-devices`	read
`get-diagnostics`	read
`get-entry-exit-paths`	read
`get-exit-pages-by-devices`	read
`get-exit-pages-by-section`	read
`get-external-links`	read
`get-external-links-history`	read
`get-feed-regions`	read
`get-feed-status`	read
`get-feeds`	read
`get-geography`	read
`get-goals`	read
`get-high-bounce-pages-organic`	read
`get-host`	read
`get-important-url-history`	read
`get-important-urls`	read
`get-indexing-history`	read
`get-indexing-samples`	read
`get-insearch-history`	read
`get-insearch-samples`	read
`get-new-vs-returning-organic`	read
`get-organic-activity-by-day-of-week`	read
`get-organic-activity-by-hour`	read
`get-organic-browsers`	read
`get-organic-seasonality`	read
`get-organic-traffic-dynamics`	read
`get-page-depth-by-sections`	read
`get-popular-pages`	read
`get-popular-queries`	read
`get-problematic-os`	read
`get-quality-referral-traffic`	read
`get-query-analytics`	read
`get-query-history`	read
`get-recrawl-queue`	read
`get-recrawl-quota`	read
`get-recrawl-task`	read
`get-referral-conversions`	read
`get-referral-donors-behavior`	read
`get-referral-full-urls`	read
`get-region-children`	read
`get-region-ids`	read
`get-regions`	read
`get-regions-tree`	read
`get-report`	read
`get-screen-resolutions`	read
`get-search-events-history`	read
`get-search-events-samples`	read
`get-search-phrases`	read
`get-single-query-history`	read
`get-sitemap`	read
`get-sitemaps`	read
`get-social-landing-pages`	read
`get-social-networks-quality`	read
`get-social-networks-traffic`	read
`get-sqi-history`	read
`get-summary`	read
`get-top-exit-pages-organic`	read
`get-traffic-sources`	read
`get-traffic-summary`	read
`get-user`	read
`get-user-sitemap`	read
`get-user-sitemaps`	read
`get-visit-frequency-organic`	read
`list-adgroups`	read
`list-ads`	read
`list-campaigns`	read
`list-hosts`	read
`list-keywords`	read
`manage-ad`	read
`manage-campaign`	read
`regions`	read
`search`	read
`set-bids`	write
`set-negative-keywords`	write
`submit-recrawl`	write
`top-requests`	read
`update-campaign`	write

Trust audit

BLOCKgrade F · trust 59/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (5 observation(s))
Shell: declared (3 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (13)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/yandex-direct-mcp/src/auth.mjs:10

exec(`${start} "${url}"`);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/yandex-metrika-mcp/src/auth.mjs:10

exec(`${start} "${url}"`);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/yandex-webmaster-mcp/src/auth.mjs:10

exec(`${start} "${url}"`);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

packages/yandex-direct-mcp/src/auth.mjs:98

console.log(token);

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

packages/yandex-metrika-mcp/src/auth.mjs:93

console.log(token);

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

packages/yandex-webmaster-mcp/src/auth.mjs:92

console.log(token);

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

delete-adgroup

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

packages/yandex-webmaster-mcp/test/endpoints.test.mjs:21

const baseUrl = `http://127.0.0.1:${httpServer.address().port}/v4`;

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@biomejs/biome

Why it matters. 1 dependency range(s) float