Backup Ai MCP Server

This MCP server has critical security vulnerabilities that prevent safe deployment. The code depends on an external auth_middleware module from a non-standard path that is not included in dependencies, making authentication enforcement unverifiable. Additionally, the server has unrestricted filesystem access (reading/writing arbitrary paths via source_path parameters), missing input validation on critical parameters, and uses a non-standard MCP pattern with an HTTP wrapper exposing the server on 0.0.0.0:8000. These issues combined create significant risks of unauthorized access, path traversal, and data exfiltration. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.