辨辨证云中医辨证人工智能解决方案辨证云是一款基于人工智能技术的中医智能辅助辨证系统解决方案,本系统以人工神经网络和专家知识图谱相结合,由主症(病)入手,四诊合参,建立中医辨证推理模型,模拟真实临床环境下的中医辨证施治全过程,复刻了中医专家的辨证思维,提供传统方剂、中成药、针灸、指压、耳针、头针、水针、电针、刮痧、食疗药膳等多种处方组合。本系统还独家建⽴了《伤寒论》六经【双辨证】体系,结合多维度、多层次推理模型,解决了六经复杂性辨证的难题。 本系统包含两大核心平台:中医辨证人工智能SaaS平台、中医传承零代码开发PaaS平台。 从1990年开始,经过30年沉淀和演进,完成数千例临床验证并通过专家鉴定,目前已经开发了涵盖400余种疾病和中药诊疗单方,其中包括上百位国医大师和名老中医的专科病症,经临床双盲验证,专科病症与中医专家辨证及处⽅符合率达90%以上。 具体对接请参考接口文档: 【辨证云开放接口】Mcp https://c.zydsoft.cn/open/v2/docs/?page=004d00630070

mcp-so:辨证云中医辨证人工智能解决方案mcp服务_zydsoft

View source
A
92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

2

Score

92/100

MEDIUM 1
LOW 1

Findings (2)

MEDIUM
Auto-confirm flag bypassing user verification
L64

Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation

"-y"
FIX

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

FP?

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.

LOW
npx MCP server without version pin
L62

Detects MCP server configs using npx to run packages without version pinning

"command": "npx"
FIX

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

FP?

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.