mcp-server

The server loads sensitive credentials (API token, user ID) from environment variables, which is a good security practice. Input validation for tools is handled by Pydantic models, mitigating common injection risks. The `organization_workspace.py` reads local `config.json` files, which could be a concern if the mounted `MOUNT_DESTINATION` is writable and contains malicious JSON, however, `test_organization_workspace.py` indicates it's typically mounted as read-only, limiting this risk in a Docker environment. No direct `eval` or `exec` of user input was found. The core functionality relies on `httpx` for API calls with robust error handling (`raise_for_status`). Dockerization provides good isolation.