Finstudio MCP Server

This MCP server provides financial modeling tools (DCF valuation, unit economics, P&L forecasting, tax comparison) with no authentication or authorization controls. The server accepts arbitrary financial parameters from users without validation, enabling calculation manipulation. Additionally, the code contains persistent marketing/solicitation content (Telegram handles, consultation promotions) embedded in tool outputs, raising concerns about the server's primary purpose. While no data exfiltration or code execution vulnerabilities exist, the lack of auth on sensitive financial calculations and the promotional nature of the tool outputs present moderate security and trustworthiness concerns. Supply chain analysis found 7 known vulnerabilities in dependencies (0 critical, 6 high severity).

2 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.