Wallet To Social MCP Server

This is a Next.js financial application for wallet-to-social identity resolution with an MCP server component. The codebase demonstrates good authentication practices for API endpoints and reasonable permission scoping appropriate to its finance category. However, several code quality and security concerns lower the score: insufficient input validation on wallet address parsing, overly broad error handling that may mask security issues, potential sensitive data exposure in logs/analytics, and incomplete sanitization of user-provided text in multiple contexts. The MCP server authentication design is reasonable but relies entirely on upstream API authentication without additional controls. Supply chain analysis found 7 known vulnerabilities in dependencies (0 critical, 4 high severity).

3 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.