License Checker Ai MCP Server

This MCP server has a critical vulnerability in its authentication architecture. The auth_middleware.py is imported from a local path (~/clawd/meok-labs-engine/shared/) that users must manually set up, creating a significant supply chain and deployment security risk. Additionally, the authentication implementation relies on local file storage without encryption, hardcodes paths, and the server can be called without valid API keys despite claiming authentication requirements. The tools themselves are benign (license analysis), but the authentication bypass and insecure credential handling in auth_middleware.py present real security concerns for users relying on this for access control. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.