Back to Browse

Is It Ai MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server that reads C2PA Content Credentials: what an image declares about its own origin

About

MCP server that reads C2PA Content Credentials: what an image declares about its own origin

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-designed MCP server with strong security fundamentals. The codebase demonstrates careful threat modeling, proper input validation, and explicit handling of untrusted data from files. The server reads C2PA manifests from images and validates signatures—it has no authentication requirements (intentional for a local-only tool) and appropriately scoped permissions. Minor code quality observations exist but do not constitute security vulnerabilities. Supply chain analysis found 3 known vulnerabilities in dependencies (1 critical, 1 high severity). Package verification found 1 issue.

5 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-johannsenlum-is-it-ai-mcp": {
      "args": [
        "is-it-ai-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!