Back to Browse

Gs1 Bridge MCP Server

Developer ToolsUse Caution3.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Bridge GS1 / EPCIS supply-chain identity + traceability to ONE OS — parse, map, govern (EU Digital

About

Bridge GS1 / EPCIS supply-chain identity + traceability to ONE OS — parse, map, govern (EU Digital

Security Report

3.2
Use Caution3.2High Risk

The server implements basic GS1/EPCIS parsing and traceability governance tools with minimal external dependencies. However, it contains a data exfiltration risk via the internal _sigil() logging function, which writes detailed operation logs to a file that persists across runs. Additionally, the server lacks input validation on regex patterns and performs file I/O operations without proper error handling or sanitization. While the core tools are simple and the authentication model is implicit (MCP-based), the logging mechanism and file handling raise moderate security concerns. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

5 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-csoai-org-gs1-bridge-mcp": {
      "args": [
        "gs1-bridge-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

gs1-bridge-mcp

mcp-name: io.github.CSOAI-ORG/gs1-bridge-mcp

Part of the CSOAI Layer-0 legacy-bridge family. Bridge GS1 / EPCIS supply-chain identity + traceability to ONE OS — parse, map, govern (EU Digital Product Passport / food safety).

Tools: parse_gs1 · map_to_modern · govern_traceability

pip install -e .
python server.py

Reviews

No reviews yet

Be the first to review this server!