Ecommerce Ai MCP Server

This MCP server has critical security issues that prevent safe deployment. The server imports authentication from an external shared path (`~/clawd/meok-labs-engine/shared/auth_middleware`) that is not provided in the codebase, making authentication verification impossible. More critically, the `sys.path.insert(0, ...)` manipulation with home directory expansion is a dangerous pattern that could enable code injection attacks. Additionally, all tool functions accept an `api_key` parameter but never validate it against any token format or policy, creating a false sense of security. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.