Education Ai MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for production use. The code contains a dangerous path injection vulnerability that adds user-controlled paths to Python's import path, lacks proper input validation on several tools, and relies on an external authentication module that is not provided in the codebase. Additionally, the server's rate limiting implementation is trivial and easily bypassable, and there are concerns about the opaque external dependencies. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.