wxgov_mcp_server

API keys are securely read from environment variables and are hashed using SHA-256 before being stored in an in-memory cache, preventing plain-text storage. The `WxGovClient` implements robust retry logic with exponential backoff for network errors, timeouts, and specific HTTP status codes (401, 429, 5xx). Tool functions include input validation to prevent common errors. No 'eval' or malicious patterns were found in the provided source code. The HTTP client `httpx` is used, which is a secure and modern library.