Csv Analytics MCP Server

This CSV Analytics MCP server has critical security vulnerabilities stemming from an insecure authentication middleware dependency and unsafe path operations. The server imports `auth_middleware.check_access()` from a hardcoded shared path (`~/clawd/meok-labs-engine/shared`) that is neither included nor verifiable, creating an unauditable trust boundary. Additionally, the `load_csv()` function accepts arbitrary file paths without validation, enabling path traversal attacks to read sensitive files outside intended directories. While the core CSV analysis operations are reasonably implemented, these foundational security flaws make the server unsafe for production use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.