Color Ai MCP Server

This MCP server has critical security issues that prevent safe deployment. The code imports from an external shared authentication middleware located at a user home directory path, creating a major dependency and supply chain risk. Additionally, the authentication mechanism relies entirely on this external module without any fallback or inline implementation, and the code contains path traversal patterns and unsafe path manipulation that could be exploited. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.