Insurance Verification MCP Server

This insurance verification MCP server has critical security vulnerabilities that make it unsuitable for production use. The most severe issue is a hardcoded path traversal to an external authentication system (~/clawd/meok-labs-engine/shared) that is not included in the repository, creating an undeclared dependency on an external codebase and making the server non-functional without this path. Additionally, the server implements rate limiting and access control through an external auth_middleware module that is completely opaque—no source code is available for review, and the server blindly trusts its output. The server also stores user data in memory (_CLAIMS, _VERIFICATIONS) with no persistence layer, making it unsuitable for actual insurance operations. These architectural choices, combined with missing input validation on several functions, create a system that cannot be securely audited or deployed. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.