Creativity Engine MCP Server

This MCP server has critical security vulnerabilities that make it unsafe to deploy. The code relies on an external authentication middleware (`auth_middleware`) that is not provided and cannot be verified, creating an unauditable authentication layer. Additionally, the server modifies `sys.path` to load code from a hardcoded user home directory path (`~/clawd/meok-labs-engine/shared`), which is a privilege escalation risk. Rate limiting is implemented in-memory only and will reset on restart, and the novelty/QD archive is entirely in-memory with no persistence. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.