Back to Browse

Jwt Ai MCP Server

Developer ToolsUse Caution1.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Jwt Ai MCP Server by MEOK AI Labs

About

Jwt Ai MCP Server by MEOK AI Labs

Security Report

1.2
Use Caution1.2Critical Risk

This MCP server contains a critical data exfiltration vulnerability via unsanctioned network calls to an external metering service (proofof.ai). The server makes HTTP requests to external URLs with user API keys and usage data without explicit user consent or transparent disclosure. Additional concerns include overly broad rate-limiting that constrains core functionality to 30 calls/day (free tier), use of environment variable injection patterns for monetization keys, and insufficient input validation on JWT payloads. While JWT operations themselves are implemented reasonably, the monetization and metering layer introduces serious privacy and security risks. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

7 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-csoai-org-jwt-ai-mcp": {
      "args": [
        "-y",
        "jwt-ai-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!