Uk Ai Act MCP Server

This UK AI regulation compliance MCP server implements rate-limiting and basic API key authentication, but has several moderate security concerns. The authentication system relies on environment variables and client-side key validation without server-side enforcement for the main tools, the rate-limiting mechanism is in-memory and not persistent across restarts, and there is potential for data exfiltration through unvalidated user input in JSON responses. While the server's purpose aligns with its permissions (file I/O, environment variables), the weak authentication implementation and input handling create meaningful security risks that users should be aware of. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.