Deepfake Detector MCP Server

This MCP server has a critical authentication vulnerability: it imports an external auth_middleware module from a hardcoded user filesystem path that is not included in the repository, creating an unauthenticated code execution risk. Additionally, the server lacks proper input validation on API parameters and relies on client-provided metadata without sanitization. While the deepfake detection logic itself is reasonable heuristic-based analysis, the authentication bypass and missing dependencies make this server unsafe to deploy. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.