Habit Tracker Ai MCP Server

This MCP server has a critical dependency on an external, unverified authentication and persistence module located at ~/clawd/meok-labs-engine/shared. The server cannot function without access to check_access() and ServerStore, which are imported from a non-standard path with no version pinning or integrity verification. Additionally, the server implements a weak rate-limiting mechanism using in-memory storage that resets on restart, and relies on undocumented external modules for core functionality. The lack of inline authentication validation and reliance on external shared code creates significant trust and maintainability concerns. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.