firemcp

The server explicitly uses the Firebase Client SDK instead of the Admin SDK, which is a critical security advantage as it respects Firestore Security Rules. This prevents AI agents from having unrestricted database access even if they behave unexpectedly. All tool inputs are validated using Zod schemas, mitigating potential injection vectors for structured data. Environment variables are correctly used for Firebase credentials, preventing hardcoded secrets. The implementation of individual Firestore operations is standard, and there are no apparent uses of 'eval', obfuscation, or other broadly malicious patterns in the provided code snippets. Network risks are minimal for a well-tested SDK, although public-facing HTTP/SSE endpoints always carry some inherent attack surface.