MosADD OS MCP Server

This is a well-engineered MCP client installer and stdio shim with generally sound security practices. The code properly handles authentication tokens (environment variables, not hardcoded), implements cryptographic signature verification for address lists, and avoids arbitrary code execution. However, there are moderate concerns around file backup handling, error messages that could leak sensitive information, and some input validation gaps in configuration merging that could be exploited. Supply chain analysis found 3 known vulnerabilities in dependencies (2 critical, 0 high severity).

4 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.