crypto-mcp-server

The server uses `zod` for robust input schema validation across all tools, significantly mitigating risks from malformed inputs. Network requests are made to the public Binance API, which does not require API keys for these endpoints. Sensitive LLM API keys are explicitly configured via `config.json` (excluded from version control) or environment variables, with clear warnings against committing them. The custom HTTP server implementation includes basic error handling for JSON parsing and requests. No 'eval' or other obviously dangerous code execution patterns are observed. The primary remaining theoretical risk is a highly compromised LLM generating valid but misleading tool call arguments, though input validation lessens this.