kommo-mcp-server

The server dynamically receives Kommo authentication tokens and subdomain via HTTP headers or environment variables. While this offers flexibility for multi-account support, it shifts the responsibility for securing these sensitive credentials to the calling client and the underlying Cloudflare Workers infrastructure. No hardcoded secrets were found in the provided source code, nor any direct 'eval' or malicious patterns. Error handling prevents exposing raw stack traces. The security relies heavily on the secure deployment context (e.g., TLS, proper access controls for the Cloudflare Worker endpoints).