mcp

The project demonstrates a very strong 'security-first' approach. It features multiple layers of input validation against command injection (no shell execution, shell metacharacter blocking, path traversal prevention), a strict command allowlist and denylist, and mandatory `--user-reviewed` flag for dangerous operations (e.g., delete, purge, create). It performs binary security checks on the Fastly CLI to prevent tampering (e.g., world-writable permissions on Unix). Sensitive tokens in responses are optionally encrypted using an ephemeral (non-persisted) key, protecting them in transit/display to the LLM. No hardcoded secrets were found. The HTTP server defaults to localhost, minimizing network exposure. The level of defense-in-depth is exceptionally high for a CLI wrapper.