Crypto Quant Signal MCP Server

This is a legitimate MCP server for cryptocurrency trading signals with a complex codebase. While the code demonstrates sophisticated engineering (auth layers, quota management, rate limiting), there are several moderate-severity concerns: environment variable credential handling, broad network permissions, and a large external dependency footprint without transparent security audits. The server serves authenticated API calls appropriately, but lacks documented input validation patterns and has some code quality gaps. Permissions align reasonably with the finance category baseline, but the lack of visible security hardening documentation is notable for a service handling financial data. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.