Encoder Ai MCP Server

This MCP server has critical security issues that make it unsuitable for production use. The code attempts to load an external authentication middleware from a hardcoded local path (`~/clawd/meok-labs-engine/shared`), which does not exist in the repository and cannot be verified. This breaks the server's functionality and prevents security validation of the auth system. Additionally, the server logs sensitive information (input_length based on locals() which includes api_key) and has incomplete tool implementations (several tools return stub responses without actually performing their stated operations). The code quality issues and missing dependencies create significant risk. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.