Api Tester Ai MCP Server

This MCP server has critical security vulnerabilities that prevent it from being safely used. The server has an undisclosed external dependency on a private authentication middleware located at ~/clawd/meok-labs-engine/shared, which is not included in the codebase and cannot be audited. Additionally, the server accepts arbitrary HTTP requests without proper input validation or sanitization, creating potential for SSRF attacks and abuse. The rate limiting is implemented client-side without persistent state, making it trivially bypassable. These issues, combined with the opaque authentication mechanism, create serious risks for users. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.