webmcp-sh

The application runs entirely client-side using PGlite (PostgreSQL in browser) and Drizzle ORM, reducing traditional server-side attack vectors. It implements robust security features for AI agent interaction, including an `analyzeQuery` function in `useMCPSQLTool.ts` that explicitly blocks dangerous SQL operations (e.g., DROP, TRUNCATE, ALTER) and common SQL injection patterns. A protected `audit_log` table with database triggers prevents modification or deletion of audit entries, ensuring integrity. Sentry is integrated for error logging, which collects telemetry data, including potentially PII by default if `sendDefaultPii: true` is left as is, but this is a standard configuration choice. The main security considerations are inherent to browser environments and interaction with external browser extensions.