Koreanpulse MCP Server

koreanpulse is a well-architected MCP server for Korean equity intelligence with generally sound security practices. Authentication via license keys is properly gated on paid tools, credentials are stored in environment variables rather than hardcoded, and permissions align with its stated purpose (network access for DART API and translation services, environment variable access for secrets). However, several moderate concerns exist: the codebase was not fully provided for review, the remote hosted endpoint lacks explicit transport layer security documentation, and third-party billing/license validation introduces attack surface that requires careful ongoing maintenance. The server handles sensitive financial data and user credentials but shows no signs of malicious patterns or data exfiltration. Recommended for use with standard operational security practices. Supply chain analysis found 12 known vulnerabilities in dependencies (3 critical, 6 high severity).

4 files analyzed · 19 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.