Meok Governance Smithery MCP Server

This MCP server provides AI governance and compliance tools with reasonable code structure and no malicious patterns. However, there are notable security and code quality issues: incomplete authentication implementation (API key check defined but not enforced on tools), missing input validation on user-supplied arguments, undefined variable references in Python code, and hardcoded monetization/pricing endpoints. The server's permissions (network access, environment variable reading) are appropriate for its governance documentation purpose, but the incomplete auth layer and loose input handling create moderate risk. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).

8 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.