Agent Delegation MCP Server

This MCP server has critical security issues that make it unsuitable for production use. The server imports from an undocumented external path (`~/clawd/meok-labs-engine/shared`) that is not included in the codebase, making the auth_middleware module unverifiable and potentially dangerous. The authentication mechanism cannot be audited, and the server lacks input validation on several fields that could lead to injection attacks. Additionally, the in-memory storage means all tasks are lost on restart, and there is no actual task execution—the server merely simulates task management. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.