complaints-mcp

The server is designed for local operation via stdio transport, minimizing network exposure. It explicitly prevents external data transmission and cloud storage. Strong input validation, including length limits and path sanitization (e.g., `filepath.Clean`, `strings.Contains("..")`), is in place to prevent common vulnerabilities like directory traversal. File permissions are set to `0644` for created files. No authentication is required for local usage, as it's intended for direct AI agent integration on a trusted local system. No `eval` or code obfuscation patterns are apparent. Hardcoded secrets for external services are not visible, though it stores potentially sensitive complaint data locally.