Data Science Ai MCP Server

This MCP server contains a critical security vulnerability: it imports an external authentication module from a hardcoded local path (`~/clawd/meok-labs-engine/shared`) that is not provided in the repository and cannot be verified. This path-based dependency creates a supply chain risk and makes the server unable to function without external, unauditable code. Additionally, the server implements a client-side rate limiting mechanism that can be trivially bypassed, and the authentication check can be circumvented by passing an empty `api_key` parameter. These issues prevent proper access control and pose significant security risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.