Citation Finder Ai MCP Server

This MCP server has critical security vulnerabilities that prevent safe deployment. The code contains an unsafe external path dependency injection (sys.path.insert with user-controlled home directory), relies on an undocumented external authentication module that cannot be verified, and implements rate limiting that can be trivially bypassed via the optional api_key parameter. These issues, combined with the lack of actual API integration (only URL generation), make this server unsuitable for production use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.