Consciousness Engine MCP Server

This MCP server has several critical security issues that make it unsafe for production use. The authentication system is non-functional (check_access is imported from an external, unverifiable path and its implementation is unavailable), rate limiting is easily bypassed due to reliance on in-memory state, and there is a suspicious hardcoded MEOK_API_KEY environment variable that appears unused. The server also modifies global state without proper isolation, creating data integrity issues in multi-user scenarios. While the core functionality is benign, the broken authentication layer means access controls cannot be enforced. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.