Customer Support Ai MCP Server

This MCP server contains a critical security vulnerability: it imports from a hardcoded local path (`~/clawd/meok-labs-engine/shared`) that is not included in the codebase and relies on an external authentication middleware module that cannot be audited. This creates a supply chain risk and makes the actual authentication mechanism opaque. Additionally, the server lacks input validation on several tools, contains rate limiting that can be trivially bypassed, and has no error handling for missing dependencies. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.