dynatrace-mcp

The server implements robust OAuth 2.0 flows (Client Credentials and Authorization Code with PKCE) for secure authentication with Dynatrace. It explicitly avoids persisting OAuth tokens to disk, enhancing security. Sensitive operations like sending emails, Slack messages, or modifying workflows require explicit human approval, significantly mitigating risks of automated unintended actions. All Dynatrace environment URLs are validated to prevent connections to arbitrary external domains. Telemetry is implemented with anonymized data and can be disabled. No 'eval' or obvious malicious code patterns were found. A minor consideration is the hardcoded default client ID for the interactive OAuth flow, which is acceptable for a public client but worth noting.