Utility Converter MCP Server

This is a well-constructed utility converter MCP server with clean, safe code. All tools are properly validated with no dangerous patterns. The single external API call (Frankfurter) is handled with appropriate error handling and timeouts. The calculator uses AST-based evaluation rather than eval(), preventing code execution. No credentials are embedded, and the server requires no authentication—which is appropriate for its stateless utility purpose. Minor code quality observations do not materially impact security. Supply chain analysis found 6 known vulnerabilities in dependencies (2 critical, 3 high severity).

3 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.