mcp-server

The server correctly handles API keys/JWTs via environment variables, avoiding hardcoded secrets. Network requests are made using standard `fetch` with retries and timeouts, and a specific user agent is set. File system operations are localized to `.contextstream/config.json` in the project root and `~/.contextstream-mappings.json` globally, as well as reading project files for indexing. File reading for ingestion includes explicit ignore lists for common sensitive directories/files (`node_modules`, `.git`, lock files) and a maximum file size limit (1MB), mitigating risks of accidental data exposure or excessive resource consumption. No `eval` or similar dynamic code execution vulnerabilities were found. Overall, the server appears well-designed for security within its intended scope as a local client-side agent.