grist-mcp-server

The server demonstrates strong input validation using Zod schemas, output sanitization (redacting sensitive information like API keys and emails from logs/responses), and relies on environment variables for sensitive data like API keys. However, the `grist_query_sql` tool accepts arbitrary SQL strings from user input. While it passes parameters separately to the Grist API, the function `addPaginationToSql` directly injects pagination values into the SQL string. Furthermore, its documentation warns that for older Grist versions, users might need to manually embed values (and 'use proper escaping!'), which could pose a SQL injection risk if not handled meticulously by the user/agent. No direct `eval` or `child_process` calls were found in the main server logic, enhancing its safety profile under normal operation.