FunDownloader Link Tools

Why it got a C

A small local server over stdio with one tool, normalize_media_link. It takes a Spotify track or playlist, Instagram post or reel, or X/Twitter status URL and returns one canonical form (type, id, url). Parsing is done in-process: it makes no network request, checks no availability and downloads nothing, and it rejects short links, albums, credentials in the URL and other platforms rather than guessing. The tool is marked read-only and closed-world. MIT licensed, built on the official MCP TypeScript SDK, with a node:test suite. server.json names it io.github.boddapQ/fundownloader-link-mcp, but a search of the official MCP Registry found no entry and npm has no package yet (the README points to an open issue for publishing), so it runs from source only. No advisories on record. Biggest deduction: no authentication at all (low impact for a local tool that only parses strings), and the repo is days old with one commit and one maintainer, so there is little history to judge. It comes from the team behind a media-downloader site, and the returned JSON carries that site's address as a field.