Hydration Reminder Ai MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for production use. The most severe issue is a hardcoded path to an external authentication module (`~/clawd/meok-labs-engine/shared`) that is injected into sys.path without verification, creating a path traversal and code injection risk. Additionally, the authentication mechanism itself is not implemented in the provided code, making it impossible to verify that access control is functioning. The server also has inconsistent implementations across multiple entry points and missing input validation in several tools. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.