Ai Gateway MCP Server

This MCP server has critical security vulnerabilities that make it unsafe to deploy. The server imports an external auth middleware from a hardcoded, non-standard path (`~/clawd/meok-labs-engine/shared`) that is not version-controlled or auditable, creating a supply chain risk. Additionally, the server lacks input validation on all user-facing parameters, making it vulnerable to injection attacks. The authentication mechanism is opaque and cannot be verified. While the server's intended functionality (model routing and cost estimation) is reasonable for a developer tool, the architectural issues and missing security controls are severe. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.