X402 MCP Server

This MCP server provides distributed coordination primitives via Redis but has critical security gaps: complete absence of authentication/authorization on all endpoints, unauthenticated Redis access, and dangerous unauthenticated operations (force-release locks, reset critical state). Any client with network access can manipulate distributed locks, barriers, and leader elections. The code quality is reasonable, but the permission scope (unrestricted Redis access) far exceeds what should be exposed without auth. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue (1 critical, 0 high severity).

3 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.