consciousness-mcp

The server has critical network security vulnerabilities due to a complete lack of authentication and authorization mechanisms for both its HTTP REST API and WebSocket interfaces. It broadly enables CORS ('Access-Control-Allow-Origin: *') for HTTP, meaning any website can directly interact with it. The `POST /api/tools/:toolName` endpoint allows unauthenticated execution of any registered tool with arbitrary arguments. Similarly, WebSocket connections are unauthenticated, allowing any client to connect, receive internal awareness broadcasts, and send messages, some of which trigger internal state updates (e.g., subscribing, getting status). While the tools are designed for introspection, a malicious actor could trigger resource-intensive operations or gain sensitive internal information, leading to denial-of-service, information disclosure, or manipulation of the ecosystem's 'awareness'. There are no visible hardcoded secrets or 'eval' usage, but the open network access is a severe risk.