remote-dynamodb-mcp-server

The server accesses AWS credentials directly from environment variables, which is standard but relies heavily on the deployment environment's security. A critical vulnerability is the lack of built-in authentication and authorization for client connections over the remote HTTP/SSE transport. The server enables `Access-Control-Allow-Origin: *`, allowing requests from any domain, making it highly susceptible to unauthorized access and command execution if exposed publicly. While delete operations are intentionally not supported, other destructive or costly operations (e.g., creating tables, updating capacity to high values) can be performed by any client successfully connecting. Error logging to `console.error` might expose internal details. The `create_lsi` tool creates a new table with an LSI, rather than adding an LSI to an existing table, which is a functional quirk but not a security risk.