Subscription Tracker Ai MCP Server

This MCP server has a functional authentication and persistence layer with appropriate tiering controls, but contains several code quality and design issues that warrant caution. The server implements rate limiting and basic access control, but stores sensitive data (subscription information) in plaintext SQLite files in the user's home directory without encryption, has no input validation on core parameters, and lacks comprehensive error handling. Additionally, the auth middleware references hardcoded external URLs and relies on local file-based key management, which may not scale securely. While not inherently malicious, the implementation would benefit from security hardening before production use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.