Meridian MCP Server

Meridian is a well-architected compliance scanner with solid security practices. Authentication is properly delegated to user-controlled environment variables, input validation is present, and there are no indicators of malicious patterns or data exfiltration. Minor findings include broad exception handling and a potential path traversal concern that is mitigated by framework design, neither of which materially impact security. Permissions appropriately match the server's compliance-scanning purpose. Supply chain analysis found 7 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.