wesign-mcp-server

The server has critical security vulnerabilities if exposed publicly. The `wesign_download_document` tool allows a user-controlled `savePath` parameter, enabling potential directory traversal and arbitrary file write if not rigorously sanitized by the AI. Similarly, `wesign_upload_document` and `wesign_create_document_collection` read local files via `filePath`, posing an information disclosure risk if an attacker can control this path. The `docker-compose.yml` and configuration guides contain real-looking example credentials ('nirk@comsign.co.il', 'Comsign1!'), which is a bad practice as users might deploy them directly. Debug logging in `wesign-client.ts` includes full request/response data, which could expose sensitive information (e.g., passwords in login requests) in logs during production if not properly redacted.