Csv Tools Ai MCP Server

This MCP server has critical security vulnerabilities stemming from a hardcoded dependency on an external authentication middleware that cannot be verified. The code attempts to load `auth_middleware` from a hardcoded absolute path (`~/clawd/meok-labs-engine/shared`), which is a supply chain and path traversal risk. Additionally, the server accepts user-provided API keys as function parameters without clear security documentation, and rate-limiting is implemented in-memory without persistence across restarts. These issues, combined with an inability to audit the external auth dependency, create significant security concerns. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.