Explainability Report MCP Server

This MCP server provides AI transparency and explainability tools aligned with EU AI Act requirements. The code is well-structured and serves a legitimate governance purpose. However, there are moderate security concerns: the authentication system has a hardcoded fallback API key in environment variable checks, a custom auth engine path with directory traversal potential, overly broad exception handling, and missing input validation on user-supplied text that gets formatted into templates. These issues are fixable but should be addressed before production use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.