Churn Predictor Ai MCP Server

This MCP server has critical security vulnerabilities that significantly impact its trustworthiness. The code relies on an external auth_middleware module that is not provided in the repository, making authentication impossible to verify. Additionally, the server performs arbitrary filesystem path operations (sys.path.insert with user-controlled paths) and loads code from undocumented external sources, creating significant code injection and supply chain risks. While the core churn prediction logic is benign, these authentication and import patterns are dangerous. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.