Airspace Monitor MCP Server

This MCP server has critical security issues that make it unsuitable for production use. The server imports from a hardcoded local path (`~/clawd/meok-labs-engine/shared`) that does not exist in the provided codebase, making the `check_access()` authentication mechanism unverifiable and likely non-functional. Additionally, the server requires API key authentication but accepts it as an optional parameter in tool calls, creating a trivial bypass where unauthenticated users can invoke all tools by omitting the key. The authentication check happens after rate limiting logic, and the `auth_middleware` module is not provided, raising concerns about credential handling and access control. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.