Entroly MCP Server

This MCP server (Entroly) is a sophisticated LLM proxy with legitimate optimization goals, but exhibits several moderate security concerns. The codebase shows strong defensive patterns (input sanitization, privacy-aware logging, credential redaction), but contains risky architectural decisions: optional authentication for sensitive operations, broad network and filesystem permissions without clear gating, and reliance on external Rust dependencies for critical functionality. The code quality is generally high with thoughtful error handling, but the complexity and opt-in nature of many security features creates risk for misconfigured deployments. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 2 issues.

4 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.