Cli Builder Ai MCP Server

This MCP server has critical security issues that prevent it from being safe for production use. The code depends on an external, unverifiable authentication module at a hardcoded filesystem path that is not included in the repository, making the auth mechanism impossible to audit. Additionally, the server accepts user-supplied code generation parameters with minimal input validation, creates executable Python code without sanitization, and exposes tools without proper request validation. The rate limiting mechanism is in-memory and trivially bypassed. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.