McpServerKotlin

The server demonstrates a strong security-first design, implementing multiple layers of defense. This includes robust path traversal protection, command whitelisting with dangerous pattern detection (e.g., fork bombs, rm -rf /, sudo, chmod 777), strict read-only query enforcement for PostgreSQL, file size and extension limits, and working directory isolation. JWT authentication with RBAC is available, though it defaults to disabled, which is a common but notable security consideration for production. MongoDB operations parse JSON strings for filters and pipelines, placing the onus on the calling agent to provide safe JSON, rather than the module sanitizing content within the JSON structure.