alliance-docs-mcp

The project demonstrates good security practices, including explicit path sanitization in `storage.py` (`_title_to_filename`, `_resolve_page_path`) and leveraging established libraries like `BeautifulSoup` for HTML stripping during conversion to prevent XSS. No `eval` or obvious hardcoded secrets are present in the provided code; sensitive configurations like API URLs use environment variables with sensible defaults. The use of `requests` with a retry strategy for external API calls and `FastMCP` for serving indicates robust network handling. Potential security considerations include the inherent supply chain risk of downloading external `sentence-transformer` models for related-page embeddings (though a default well-known model, `all-MiniLM-L6-v2`, is used), and potential for high resource consumption from complex search queries if not externally rate-limited, which would typically be handled at an infrastructure level.