Fattly MCP Server

This is a well-designed MCP server for the FATTLY media generation API. The code demonstrates strong security practices with proper authentication via API keys, clear separation of concerns, and appropriate tool annotations for destructive operations. The MCP implementation correctly restricts communication to stdio (preventing unintended output), and the config system securely stores credentials with restricted file permissions (0600). Minor observations include broad exception handling and lack of input validation on some parameters, but these do not present security risks given the backend validates inputs. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.