Paper Format Agent MCP Server

The MCP server implementation is well-intentioned with legitimate academic document formatting functionality and includes a content-integrity fingerprint system. However, there are moderate security concerns: the server accepts arbitrary file paths from the user without sufficiently validated constraints, and file I/O permissions are not scoped to a safe directory. While the code quality is generally good and the server doesn't exfiltrate data or execute arbitrary code, the path traversal risk combined with unrestricted file read/write access warrants a score in the fair-to-good range. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

5 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.