jotsu-mcp

The server uses `asteval` for dynamic execution of Python-like expressions within workflows. While designed to be safer than `eval()` by limiting system access, dynamic code execution still carries inherent risks if workflow definitions are untrusted. Network requests are made to external MCP servers and OAuth endpoints, with URLs defined in workflow configurations or discovered via OAuth metadata. OAuth authentication initiates a local web server and opens a browser, which is a standard pattern for local development. Credentials can be stored locally, with an optional encryption layer using `cryptography`. External API keys are expected via environment variables, not hardcoded. No other obvious malicious patterns or obfuscation were detected.