Accounting Ai MCP Server

This accounting MCP server implements basic financial tools (invoicing, expense categorization, VAT calculation) with reasonable input handling and read-only operations. However, several security concerns lower the score: (1) the auth middleware's fail-open design and reliance on external server-side metering introduces trust and availability risks, (2) unauthenticated access is permitted by default with only client-side rate limiting as a fallback, (3) the code makes external HTTP calls to proofof.ai for verification and metering without proper error isolation, and (4) the optional auth_middleware.py can be bypassed entirely if import fails. While no data exfiltration or dangerous patterns are present, the authentication and rate-limiting architecture has meaningful gaps. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.