Blockchain Ai MCP Server

This MCP server implements basic Web3/crypto analysis tools with reasonable input validation and read-only operations. However, it contains several security concerns: unauthenticated tool access with only client-side rate limiting (easily bypassed), external network calls to unverified endpoints for metering/verification with fail-open behavior that masks security decisions, missing error handling in critical auth paths, and reliance on environment variables for sensitive configuration without explicit validation. The auth_middleware lacks proper error handling and the server-side verification endpoint could be exploited. Permissions are appropriate for a finance/blockchain server, but authentication controls are insufficient. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.