hestai-mcp-server

The server employs robust input validation (Pydantic), utilizes environment variables for sensitive data, and includes explicit redaction (RedactionEngine) for session transcripts. Path validation (`is_dangerous_path`) is implemented to prevent traversal attacks. `subprocess.run` is generally used safely (`shell=False`, `shlex.split`) when invoking external CLIs via the `CLinkTool`. Extensive simulator tests actively probe for common vulnerabilities like SQL/command injection (these are test scenarios, not part of core server implementation). The primary security consideration is the `CLinkTool`'s delegation to external, potentially untrusted, CLI clients; their configuration and permissions are critical external factors.