← MCP Security Catalog

eKYC Suite MCP Server 1.2.14

npm · @wefi-ai/ekyc-suite-mcp · latest release

Verified with no proven findings
Security result
8
Observed tools
Version rating
100
Change risk

Independent inventory

Observed 2026-08-22T06:22:08.692Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
bank_card_ocrExtract card number and expiry date from a bank card.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "image": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "Bank card image"
    }
  },
  "required": [
    "image"
  ]
}
driver_license_ocrExtract structured fields from the main page of a Chinese driver's license.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "image": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "Driver license image"
    }
  },
  "required": [
    "image"
  ]
}
face_compareCompare two face photos and return a 0-100 similarity score for identity verification.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "photo1": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "First face photo: local path in stdio mode, public HTTPS URL, or base64"
    },
    "photo2": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "Second face photo"
    },
    "sourcePhotoType": {
      "type": "string",
      "enum": [
        "1",
        "2"
      ],
      "default": "2"
    }
  },
  "required": [
    "photo1",
    "photo2"
  ]
}
id_card_ocrExtract structured fields from a Chinese national ID card.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "image": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "ID card image"
    },
    "side": {
      "type": "string",
      "enum": [
        "0",
        "1"
      ],
      "default": "0",
      "description": "0=portrait side, 1=emblem side"
    }
  },
  "required": [
    "image"
  ]
}
media_labelingDetect selected portrait and environment risk labels in an image or video.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "file": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "Image or video"
    },
    "labels": {
      "type": "string",
      "pattern": "^[AB][0-9]{2}(,[AB][0-9]{2}){0,4}$",
      "description": "1-5 comma-separated label codes"
    },
    "type": {
      "type": "string",
      "enum": [
        "image",
        "video"
      ],
      "default": "image"
    },
    "doLive": {
      "type": "string",
      "enum": [
        "0",
        "1"
      ],
      "default": "1"
    },
    "doCompare": {
      "type": "string",
      "enum": [
        "0",
        "1"
      ],
      "default": "1"
    }
  },
  "required": [
    "file",
    "labels"
  ]
}
photo_liveness_detectDetect forged, replayed, AI-generated, or deepfake face photos.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "file": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "Face photo"
    }
  },
  "required": [
    "file"
  ]
}
vehicle_license_ocrExtract structured fields from a Chinese vehicle license.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "image": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "Vehicle license image"
    },
    "side": {
      "type": "string",
      "enum": [
        "1",
        "2"
      ],
      "default": "1",
      "description": "1=main page, 2=supplementary page"
    }
  },
  "required": [
    "image"
  ]
}
video_liveness_detectDetect deepfake or replayed face videos up to 20 seconds and 20MB.
Input schema
{
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "file": {
      "type": "string",
      "minLength": 1,
      "maxLength": 28000000,
      "description": "Face video"
    }
  },
  "required": [
    "file"
  ]
}

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: f7c8dccbb7a4564db84d94dbab4d26e4dabf4c1f5ca993087e09b2230e0c63bb

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.