Ai Self Audit MCP Server

This MCP server implements EU AI Act compliance auditing with authentication and rate limiting, but has several security and architectural concerns. The most significant issue is the reliance on a shared auth middleware file at a hardcoded path (~/clawd/meok-labs-engine/shared/auth_middleware.py) that is not version-controlled with the server, creating a supply chain risk and operational fragility. Additionally, the compliance checking logic uses simple keyword matching rather than substantive assessment, and there are concerns about local file storage of API keys and usage data without encryption. While the authentication layer exists and permissions are reasonable for the category, the implementation has notable weaknesses that require remediation. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.