Agent Identity Trust MCP Server

This MCP server has critical security issues that prevent it from being safely used. The server imports from a hardcoded local path (~/clawd/meok-labs-engine/shared) that doesn't exist in the repository, making it impossible to verify the authentication middleware. The auth_middleware module is a critical security dependency but is completely opaque and external. Additionally, the server stores all agent identities and credentials in memory without persistence, meaning all data is lost on restart. The rate limiting implementation is weak and easily bypassable. These issues, combined with the external/unverifiable auth dependency, create an unacceptable security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.