mcpcat-python-sdk

The SDK leverages monkey-patching for deep integration with MCP server methods to intercept tool registration and execution. While this is a powerful technique, it appears to be implemented carefully for legitimate instrumentation purposes (adding context, tracking tool calls, adding a 'get_more_tools' tool) rather than arbitrary code execution. No direct use of 'eval' or obvious malicious patterns were found. Sensitive data redaction is supported via a user-defined hook. External network connections are made to the MCPCat analytics platform (hardcoded endpoint) and configurable third-party observability tools (OTLP, Datadog, Sentry), which is part of its core functionality. API keys and DSNs for these services are expected to be provided via configuration, not hardcoded within the SDK.