Content Registry MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for production use. The server imports from hardcoded internal paths that are inaccessible to external users (~/clawd/meok-labs-engine/shared), relies on an external authentication system without fallback handling, and contains insufficient input validation and authorization checks. The revoke_content function performs weak authorization checks and does not properly verify the identity of revokers. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.