Math Solver Ai MCP Server

This MCP server implements math and statistics tools with a tiered authentication system. While the core math functions are read-only and safe, there are several security and architectural concerns: (1) the server has a dependency on a shared auth middleware located outside the package at a user-specific filesystem path, creating deployment fragility and potential access control bypass; (2) rate limiting is implemented locally in-memory without persistence, making it trivial to circumvent; (3) the code imports directly from an external shared path without validation, creating a supply-chain dependency risk; (4) use of the walrus operator and broad exception handling reduce code clarity; (5) the auth_middleware.py stores API keys and usage data in plaintext in user home directories without encryption. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.