Blockchain Verification MCP Server by MEOK AI Labs
This blockchain verification MCP server has significant security and architectural concerns that make it unsuitable for production use in its current form. Critical issues include: (1) in-memory ledger with no persistence, making all "blockchain" verification meaningless after restart; (2) trivial authentication bypass via hardcoded tier validation that accepts any non-empty api_key; (3) rate limiting based on easily-spoofable SHA256 hashing of user-supplied keys; (4) filesystem permissions issues with ~/.meok directory that could lead to privilege escalation; and (5) misleading marketing claims about blockchain immutability and compliance when no actual blockchain integration exists. The server also exhibits poor error handling, missing input validation, and relies on undocumented shared middleware paths that may not exist. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 20 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-blockchain-verification-mcp": {
"args": [
"-y",
"blockchain-verification-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption