Lorem Ipsum Ai MCP Server

This MCP server implements a lorem ipsum text generator with rate limiting and a tiered authentication system. While the server itself has reasonable design patterns (read-only operations, proper error handling, rate limiting), there are significant security concerns: (1) the server imports from a hardcoded shared path `~/clawd/meok-labs-engine/shared` that may not exist in standard deployments, creating fragility and potential for path traversal attacks; (2) local file-based authentication and usage tracking without encryption or proper access controls; (3) API keys are stored in plaintext JSON files in the user's home directory; (4) the rate limiting mechanism is easily bypassable by using different identities or clearing the usage file. These issues prevent a higher security score despite the server's otherwise reasonable architecture. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.