Mock Server Ai MCP Server

This MCP server provides mock data generation tools with authentication via a custom middleware system. While the core mock generation logic is safe and rate-limited, there are significant security concerns: the server uses an unsafe sys.path.insert() pattern to load shared auth middleware from a user home directory path that may not exist or could be compromised, the auth_middleware.py stores API keys and usage data in plaintext JSON files in ~/.meok without encryption, and there is insufficient input validation on the count parameter which could be abused for resource exhaustion despite the 100-item cap. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.