Alphapipeline MCP Server

AlphaPipeline is a market data API server with reasonable security foundations, particularly in its use of x402 payment protocol for authorization instead of traditional API keys. However, there are several moderate-severity concerns: environment variable handling lacks explicit validation/sanitization, some error handling is overly broad, upstream API failures could leak sensitive intermediate state, and the codebase has minimal input validation on user-supplied parameters. Permissions are appropriate for its stated purpose (market data aggregation), but the code quality issues and lack of defensive programming warrant attention. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 6 high severity).

3 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.