Competitor Monitor Ai MCP Server

This MCP server has critical authentication and path security vulnerabilities. The auth_middleware dependency is loaded from a hardcoded user home directory path (`~/clawd/meok-labs-engine/shared`), creating severe risk of dependency injection and privilege escalation. Additionally, the server implements only basic rate limiting with no real authentication enforcement—API keys are treated as optional parameters with unknown validation logic in an external module. Data is stored entirely in memory without persistence, and the server exposes network and file system access appropriate to its category, but the authentication model is fundamentally broken. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.