Veilfile MCP Server

Veilfile is a well-architected artifact hosting service with solid authentication, authorization, and input validation. API keys are properly prefixed and scoped to workspaces. However, there are moderate security concerns: environment variables (including AWS credentials and Stripe secrets) are passed via Django settings without explicit rotation guidance, the secret scanning feature only flags rather than blocks by default (allowing potential leaks), file serving uses client-controlled token lookup without additional rate limiting, and there's minimal guidance on secure credential lifecycle management. Permissions are appropriate for the service's purpose.

4 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.