oscp-sdk

The server implements a 'Code Mode' tool that allows AI agents to write and execute TypeScript code against the SDK. This code execution is explicitly stated to occur in an 'isolated sandbox' on a remote Stainless API service (api.stainless.com/api/ai/code-tool), without local web or filesystem access. While delegating execution to a sandboxed remote service reduces local risk, it relies heavily on the security and isolation of that external service. No direct local 'eval' or similar dangerous patterns are used for agent code within the provided server code. API keys (OSCP_API_KEY) are obtained from environment variables or client options, not hardcoded. Authentication for HTTP transport is via Bearer token or x-oscp-api-key header.