Diff Ai MCP Server

This MCP server has critical security issues that prevent approval. The code relies on an external authentication module (auth_middleware) that is not provided in the repository, making it impossible to verify access control implementation. Additionally, the server uses hardcoded filesystem paths to a non-existent shared authentication system (~/clawd/meok-labs-engine/shared), creating a supply chain risk. The rate-limiting implementation is weak and easily bypassed (per-call, not enforced globally), and there is no error handling for the missing auth_middleware import, which could cause silent failures or fallback to unauthorized access. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.