Observability AIops MCP Server

This is a well-architected governance harness for observability operations with strong audit, policy, and budget controls. The code demonstrates professional security practices including parameter redaction, credential sanitization, and graduated autonomy enforcement. However, several moderate-severity issues exist: environment variable credential sourcing without encryption at rest, HTTP-based credential transmission risks, incomplete input validation in policy rule parsing, and hardcoded timeout/budget constants that could be exploited. These issues do not represent critical vulnerabilities but reflect gaps in defense-in-depth that should be addressed for production use. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

5 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.