Devops Ai MCP Server

This MCP server has critical security vulnerabilities centered on unauthenticated access to sensitive operations and a problematic dependency on an external auth middleware that cannot be verified. The server implements rate limiting and attempts authentication checks, but the `check_access()` function is imported from an unverifiable external path (`~/clawd/meok-labs-engine/shared`), which is a major red flag. Additionally, all tools accept an `api_key` parameter but perform no validation of its format or strength, and the free tier is allowed unlimited access. The code itself is generally well-written and avoids injection vulnerabilities, but the authentication layer is fundamentally broken. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.