Ai Ops MCP Server

This MCP server has critical security vulnerabilities that pose significant risk. The code attempts to import an external auth_middleware module from a hardcoded path outside the repository, creating a supply chain risk. More critically, the security_scan() tool recursively walks the user's home directory and reads .env files to search for secrets, which exposes sensitive credentials to the MCP (and thus to Claude). Additionally, subprocess.run() is used to execute `ps aux` without proper input validation, and the server establishes network connections to localhost services without authentication scope validation. These issues require immediate remediation before deployment. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.