Changelog Ai MCP Server by MEOK AI Labs
This MCP server implements changelog and versioning tools with rate-limiting and optional API key authentication. However, there are several security concerns: undocumented network calls to external metering endpoints (proofof.ai), missing import statement (json module used but not imported in server.py), potential fail-open authentication bypass, and overly broad/vague documentation that obscures actual security model. The server is functional but has authentication and transparency issues that should be addressed before production use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-changelog-ai-mcp": {
"args": [
"-y",
"changelog-ai-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.