Server data from the Official MCP Registry
Notification Ai tools for AI agents. Capabilities: send webhook, send desktop notification, ...
Notification Ai tools for AI agents. Capabilities: send webhook, send desktop notification, ...
This MCP server contains critical security vulnerabilities that make it unsuitable for production use. The most severe issue is an arbitrary file path injection in the auth_middleware.py that allows reading/writing files outside the intended directory. Additionally, the server imports and depends on a shared authentication module via an unsafe absolute path that assumes a specific filesystem layout (~/.meok and ~/clawd/meok-labs-engine/shared), creating fragility and potential privilege escalation vectors. The rate-limiting implementation is also bypassable due to weak usage tracking keyed only on hashed API keys and dates. While the notification logic itself is relatively benign, the foundational security infrastructure is fundamentally flawed. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 15 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-notification-ai-mcp": {
"args": [
"-y",
"notification-ai-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.