Eos MCP Server

eos-mcp is a well-structured network automation tool for Arista EOS devices with appropriate authentication and reasonable permissions. Authentication is credential-based (username/password in config file), with credentials properly sourced from environment or config files rather than hardcoded. However, there are notable concerns: (1) credentials are stored in plaintext in config.ini with weak guidance on file permissions, (2) SSL/TLS compatibility patches lower security standards to support legacy devices, and (3) overly broad exception handling could mask important security errors. The code quality is generally good with proper input validation and error handling, but the plaintext credential storage and TLS downgrades warrant user awareness. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.