Accounting Ai MCP Server

This accounting MCP server has a critical security vulnerability: it imports and depends on an external authentication module from a hardcoded path (`~/clawd/meok-labs-engine/shared`) that is not included in the codebase, making the actual authentication mechanism opaque and unverifiable. Additionally, the server implements rate limiting via in-memory tracking that is trivially bypassable (no persistent state), and relies entirely on an undocumented `check_access()` function whose implementation cannot be audited. The code itself is well-structured for accounting operations, but the authentication dependency is a severe supply-chain and auditability risk. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.