Event Planning Ai MCP Server

This MCP server has critical security issues that must be addressed before deployment. The server imports an external authentication middleware from a hardcoded path (`~/clawd/meok-labs-engine/shared`) that is not included in the codebase and cannot be verified, creating a major supply chain risk. All tool functions accept an `api_key` parameter but do not validate it properly—the `check_access()` function's behavior is unknown and potentially bypassable. Additionally, the server establishes a dependency on an external, unverified authentication system that could be compromised or malicious. The rate limiting mechanism uses in-memory storage without persistence, making it ineffective across server restarts. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.