Crm Ai MCP Server

This MCP server has critical security issues that prevent approval. The server imports from a hardcoded local path (`~/clawd/meok-labs-engine/shared`) to load authentication middleware, which is unavailable in standard environments and indicates a non-reproducible, externalized authentication system. Additionally, the entire authentication and access control mechanism is opaque—the `check_access()` function cannot be audited, creating a trust boundary violation. Rate limiting is implemented in-memory only, providing no protection against distributed attacks. The server's rate limiting and authentication bypass handling are weak, and the architecture relies on undocumented external dependencies. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.