Agriculture Robotics MCP Server

This agriculture robotics MCP server has a reasonable architecture with read-only tools and local rate limiting, but contains several security concerns that prevent a higher score. The server makes external network calls to a metering/verification endpoint without clear user consent, lacks proper input validation on numeric parameters, has incomplete authentication logic (the auth_middleware.py imports Tier enum that doesn't exist in the code), and stores usage data in memory without sanitization. Additionally, the code organization suggests dependency on an external shared path that may not be reliably available, and the test suite references undefined Tier enum. While no confirmed malicious patterns are present, these issues create unnecessary risk vectors for an agricultural tool. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.