thermo-mcp-server

The server primarily performs local file I/O operations on a designated JSON file (`data/latest_temp.json`), whose path can be configured via an environment variable. There is no usage of 'eval' or similar dangerous functions. Input validation for `set_latest_temperature` relies on Python's type hints and JSON serialization, which is generally safe for its scope. No hardcoded secrets or explicit external network calls (beyond the MCP client connection) are present. The primary risk would be if the `THERMO_DATA_PATH` environment variable could be manipulated by a malicious actor to point to an arbitrary file location, but within the intended use as a local development/agent server, this is a low concern.