Server data from the Official MCP Registry
Zread.ai MCP Server - 连接 zread.ai 文档平台的 MCP 服务器,让 AI 助手能够阅读 GitHub 仓库文档、搜索代码、与仓库 AI 对话。
Zread.ai MCP Server - 连接 zread.ai 文档平台的 MCP 服务器,让 AI 助手能够阅读 GitHub 仓库文档、搜索代码、与仓库 AI 对话。
Set these up before or after installing:
Environment variable: ZREAD_TOKEN
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-ejfkdev-zread-mcp": {
"env": {
"ZREAD_TOKEN": "your-zread-token-here"
},
"args": [
"-y",
"zread-mcp"
],
"command": "npx"
}
}
}The server provides legitimate functionality for interacting with Zread.ai documentation platform but has several security concerns including hardcoded tokens, excessive HTTP network permissions, and poor input validation. While the core functionality is appropriate for a developer tools MCP server, the security implementations need improvement. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
Scanned 4 files · 14 findings
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Be the first to review this server!