Hash Utils Ai MCP Server

This MCP server has a critical security vulnerability: it imports an external authentication middleware from a hardcoded local path (`~/clawd/meok-labs-engine/shared/auth_middleware`) that is not included in the repository or dependencies. This creates a supply chain risk where the actual authentication logic is opaque and unverifiable. Additionally, the server calls `check_access()` for rate limiting and access control, but this function's implementation is hidden, making it impossible to verify that authentication is properly enforced. The code quality is otherwise reasonable, but the missing/external auth dependency is a critical flaw for a server handling sensitive operations. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.