Test Case Generator Ai MCP Server

This MCP server implements test case generation with a built-in authentication and monetization layer. While the core functionality is legitimate, there are significant security and design concerns: (1) the authentication system relies on local file-based storage without encryption, creating a risk if the user's home directory is compromised; (2) the rate-limiting mechanism uses weak hashing and is easily bypassable by clearing the usage file; (3) the server embeds Stripe URLs and upgrade nudges throughout the codebase, which represents aggressive monetization; (4) the middleware imports via absolute path traversal (~/.meok and ~/clawd) that may not exist, causing potential failures; (5) input validation is minimal—function signatures are parsed with regex but not validated, and user-supplied parameter values are not sanitized before being used in test case generation. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.