Csv Analytics MCP Server by MEOK AI Labs
This CSV analytics MCP server has a legitimate data analysis purpose with reasonable permissions (file read, network for metering), but contains several security and code quality concerns that users should understand. The server implements a metering/monetization layer that makes external network calls to verify API keys and enforce rate limits, introduces pandas query injection risks, lacks input validation on file paths, and has authentication/authorization logic split across multiple files with fail-open defaults. While no malicious patterns or credential exfiltration were detected, the combination of these issues and the reliance on external metering infrastructure creates moderate risk. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-csv-analytics-mcp": {
"args": [
"-y",
"csv-analytics-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption