Ad Copy Ai MCP Server

This MCP server has critical security vulnerabilities that make it unsafe for production use. The server depends on an external authentication middleware (`auth_middleware`) from a hardcoded path that is not provided in the codebase, making it impossible to verify authentication logic. Additionally, the server imports and adds this external path to `sys.path`, creating supply chain and code execution risks. The authentication check is implemented but cannot be audited. Local data storage is unencrypted and has no access controls. Rate limiting is implemented but bypassed for users with valid API keys, and the implementation is easily exploitable. These issues significantly exceed what should be acceptable for a developer tool. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.