Spelunking Agent MCP Server

Spelunking.ai is a well-architected client and worker application for ethical AI reasoning. The Python client uses standard library only, implements proper authentication with bearer tokens in headers (never query strings), and has no hardcoded credentials or sensitive data. The Worker application reasonably delegates to external models (Anthropic or Cloudflare Workers AI) for computation. Minor code quality findings (broad exception handling, incomplete input validation in some paths) do not significantly impact security given the application's purpose and permission scope. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

6 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.