Translator Pro Ai MCP Server

The MCP server implements a basic translation tool with a tiered authentication system via API keys. While the authentication framework and rate limiting provide reasonable controls, there are several security and code quality concerns: hardcoded monetization URLs and Stripe links appear throughout the codebase, the auth_middleware relies on local filesystem storage without encryption, and the server lacks input validation on the `api_key` parameter itself. Additionally, the auth middleware implements an unusual path-injection pattern (`sys.path.insert`) that could be exploited, and sensitive configuration (API key storage) is unencrypted on disk. These issues prevent the server from scoring higher despite its narrowly-scoped functionality. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.