tilt-mcp

The server employs robust security practices. CLI interactions use `node:child_process.spawn` with argument arrays, explicitly avoiding shell interpolation to prevent command injection. All user inputs (resource names, filters, Tiltfile args, regex search queries/flags) are rigorously validated using Zod schemas with strong regex patterns to disallow malicious characters and patterns. Connection details (TILT_PORT, TILT_HOST) are configured via environment variables and not exposed as tool parameters, mitigating cross-instance attack vectors. The `tilt_dump` tool, which could expose large raw engine state, is intentionally not registered for MCP use. Regex flags in `tilt_logs` are validated, and the global flag is disallowed to prevent stateful matching issues. Overall, strong focus on preventing common injection and abuse vectors.