resume-mcp

The server implements robust security measures including API key authentication for write operations, Zod schema validation for all data inputs (including merged patch results), and filename sanitization to prevent path traversal attacks during version restoration. Environment variables are used for sensitive configurations like API keys and database credentials, preventing hardcoding. Emergency backups are created on validation failures and before restores, enhancing data safety. No 'eval' or obfuscation is present. The resume schema uses `.passthrough()` which allows additional custom fields, offering flexibility but requiring careful consideration if strict schema enforcement is critical for preventing arbitrary data storage.