SaturnZap MCP Server

SaturnZap is a well-architected Lightning wallet CLI with strong fundamentals, but contains several security concerns that warrant attention. The codebase demonstrates good cryptographic practices (Fernet encryption for seeds, BIP39), proper input validation in most areas, and appropriate permission scoping. However, critical vulnerabilities include use of `subprocess` with shell=True for firewall operations without input validation, unsafe passphrase retrieval via `getpass()` with fallback to plaintext env vars, insufficient escaping in IPC socket operations, and weak validation of external Esplora endpoints that could lead to chain synchronization attacks. Additionally, the MCP server lacks per-tool spending limits and request rate limiting, and there is inadequate logging of sensitive operations. The architecture is sound and the code quality is generally high, but these security gaps should be addressed before production mainnet use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

3 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.