Image Metadata Ai MCP Server

This MCP server has critical security issues that prevent approval. The code imports an external authentication middleware from a hardcoded home directory path (`~/clawd/meok-labs-engine/shared`), which is not included in the repository and cannot be audited. This represents a supply chain risk where arbitrary code could be executed from an uncontrolled source. Additionally, the server implements a rate-limiting mechanism that phones home to a proprietary service, and the authentication system is opaque and unverifiable. While the image metadata tools themselves are reasonably well-implemented with path traversal protections, the authentication and dependency issues are severe enough to block deployment. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 6 high severity). Package verification found 1 issue.

6 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.