Api Docs Generator Ai MCP Server

This MCP server has a functional OpenAPI specification generator but exhibits moderate security concerns. The most critical issue is unauthenticated network calls to external metering endpoints (proofof.ai/verify) that could enable request forgery or man-in-the-middle attacks. Additionally, the server lacks proper input validation on several endpoints and implements rate limiting only client-side with a fail-open metering system that is not security-critical but architecturally risky. The authentication layer is optional for basic usage, which is appropriate for a documentation generation tool, but the external metering calls create unnecessary attack surface. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.