duyet-mcp-server

The server demonstrates strong security practices: explicit URL whitelisting and path-based validation (especially for GitHub URLs) in the `web-fetch` tool, robust input validation using Zod schemas, and comprehensive rate limiting for interaction tools (`send_message`, `hire_me`). Database operations are handled via Drizzle ORM, mitigating SQL injection risks, and error messages are sanitized to prevent information leakage. Content length checks are in place for fetched web content to prevent memory exhaustion. The `allow_any_domain` flag in `web-fetch` defaults to `false`, enforcing a secure-by-default posture. While `parseDuckDuckGoResults` uses regex, it operates on a trusted source, minimizing risk. The IP address logging as 'unknown' in interaction tools reduces forensic capabilities but doesn't expose sensitive information.