Server data from the Official MCP Registry
Csoai Governance Crosswalk MCP server. Tools: query crosswalk, crosswalk bridge, compliance ...
Csoai Governance Crosswalk MCP server. Tools: query crosswalk, crosswalk bridge, compliance ...
This MCP server contains severe security vulnerabilities and critical malicious patterns. The code attempts to import from non-existent modules with hardcoded paths, includes unauthenticated API access without proper validation, stores API keys insecurely via environment variables without encryption, and exhibits path traversal risks through sys.path manipulation. Most critically, the server loads undeclared external dependencies (auth_middleware, ComplianceNeuralNet) from a hardcoded user home directory path, creating arbitrary code execution vulnerabilities. The authentication mechanism is fundamentally broken—it checks against a plaintext environment variable and provides fallback unauthenticated operation in 'dev mode'. This is extremely dangerous for a governance/compliance tool. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
4 files analyzed · 17 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-csoai-governance-crosswalk-mcp": {
"args": [
"-y",
"csoai-governance-crosswalk-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
The world's first operational Constitutional AI governance crosswalk. 17 global AI frameworks mapped through the CSOAI Partnership Charter's 52 articles — the most comprehensive in existence.
Installation · Docs · Report Bug
pip install csoai-governance-crosswalk-mcp
# or
npm install -g @meok-ai/csoai-governance-crosswalk-mcp
See the project repository for full documentation and examples.
MIT © CSOAI
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.