Healthcare Ai Governance MCP Server

This healthcare AI governance MCP server has critical security issues that make it unsuitable for production use. The server depends on an external authentication middleware (auth_middleware) that is not provided in the codebase, making the authentication mechanism unverifiable. More critically, the server uses sys.path.insert(0) to load from hardcoded user home directory paths (~/clawd/meok-labs-engine/shared), which is a significant security vulnerability enabling path traversal and arbitrary code execution. The authentication implementation lacks proper validation, and the rate limiting mechanism is easily bypassed. These issues, combined with the healthcare domain's sensitivity, present severe risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.