Blockchain Ai MCP Server by MEOK AI Labs
This MCP server implements basic Web3/crypto analysis tools with reasonable input validation and read-only operations. However, it contains several security concerns: unauthenticated tool access with only client-side rate limiting (easily bypassed), external network calls to unverified endpoints for metering/verification with fail-open behavior that masks security decisions, missing error handling in critical auth paths, and reliance on environment variables for sensitive configuration without explicit validation. The auth_middleware lacks proper error handling and the server-side verification endpoint could be exploited. Permissions are appropriate for a finance/blockchain server, but authentication controls are insufficient. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 15 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-blockchain-ai-mcp": {
"args": [
"-y",
"blockchain-ai-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption