kbsearch-mcp-server

The server itself primarily acts as a proxy, delegating complex or potentially risky operations (like RAG search and SQL execution) to external backend services. It does not contain direct `eval()` or `exec()` calls within its source code. Database credentials for the demo setup are test credentials and are confined to the Docker network, not hardcoded for production. Robust production security practices, such as a reverse proxy with authentication (e.g., client certs, basic auth, API Gateway), are explicitly recommended in the `CLAUDE.md` and are essential given the server's external exposure.