File Organizer Ai MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for production use. The server depends on an external, undocumented `auth_middleware` module from a hardcoded path that is not included in the codebase, creating an unverifiable authentication mechanism. Additionally, the server performs unrestricted filesystem operations on user-provided paths without proper validation, enabling path traversal attacks. Rate limiting is implemented but easily bypassable. These issues combined represent real security risks to users. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.