Agriculture Robotics MCP Server

This server has critical security vulnerabilities that prevent safe deployment. The primary issue is an external dependency on a hardcoded, non-standard path (`~/clawd/meok-labs-engine/shared`) for authentication middleware, which is not included in the repository and cannot be audited. This creates a supply chain risk where arbitrary code could be injected. Additionally, the authentication system design is weak—API keys are passed as optional parameters in tool calls, making them visible in logs and vulnerable to interception. The rate-limiting implementation is in-memory and non-persistent, easily bypassed across server restarts. These architectural flaws combined with the missing dependency make this server unsuitable for production use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.