Mdr Medical Device MCP Server

This MCP server implements EU medical device regulation classification tools with reasonable architecture but exhibits several security concerns. The server makes unauthenticated network calls to a metering endpoint, stores API keys in plaintext in the home directory, contains hardcoded URLs and Stripe links in sensitive code paths, and lacks proper input validation on classification functions. While the classification logic itself is sound and the code quality is generally acceptable, the authentication/authorization implementation and data handling practices present moderate risks that users should be aware of. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

5 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.