Schema Validator Ai MCP Server

This MCP server implements JSON schema validation tools with an authentication layer, but has critical architectural and security issues. The server imports an authentication middleware from a hardcoded local path that may not exist in most user environments, making the entire auth system fragile. Additionally, the path traversal in sys.path.insert() could be exploited, rate limiting is implemented in-memory and not persistent, and the auth middleware stores API keys and usage data in plaintext JSON files without encryption. While the tools themselves perform read-only operations without external network calls or code execution, the authentication bypass risk and key storage vulnerabilities significantly reduce the overall security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.