Meal Planner Ai MCP Server

This MCP server has a critical authentication bypass vulnerability and unsafe dependency path injection that poses real security risks. The server implements rate limiting and tiered access control, but the authentication can be completely bypassed by manipulating the api_key parameter. Additionally, hardcoded path manipulation (`sys.path.insert(0, os.path.expanduser("~/clawd/meok-labs-engine/shared"))`) creates a supply chain risk if the shared auth module is compromised. File system and environment variable access are appropriate for a meal planning tool, but the authentication flaws undermine the entire permission model. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.