Server data from the Official MCP Registry
Keyless local MCP server for QA: standards retrieval, effort estimation, doc review, test analysis.
Keyless local MCP server for QA: standards retrieval, effort estimation, doc review, test analysis.
QAI Consultant MCP server is a well-intentioned QA knowledge/analysis tool with solid architectural decisions around input validation, secrets management, and deterministic operations. However, the codebase exhibits moderate security concerns: unauthenticated tool exposure, overly broad file I/O permissions in review/results analysis, insufficient input sanitization in XML/CSV parsing (defusedxml is present but not guaranteed to cover all paths), and weak logging practices that could expose user project details. The server's permissions are appropriate for its purpose (developer tools category baseline), but the implementation leaves user data vulnerable to exfiltration through logs and file writes. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.
4 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: MISTRAL_API_KEY
Environment variable: OPENROUTER_API_KEY
Environment variable: PINECONE_API_KEY
Environment variable: PINECONE_INDEX_NAME
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-gvasile29-qai-consultant-mcp": {
"env": {
"MISTRAL_API_KEY": "your-mistral-api-key-here",
"PINECONE_API_KEY": "your-pinecone-api-key-here",
"OPENROUTER_API_KEY": "your-openrouter-api-key-here",
"PINECONE_INDEX_NAME": "your-pinecone-index-name-here"
},
"args": [
"qai-consultant-mcp"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.