mcp-hatchery

The CLI tool itself primarily performs file system operations (creating directories and writing template files) based on user prompts. There are no indications of 'eval' usage, obfuscation, or hardcoded secrets within the provided source code for the scaffolding logic. The generated MCP servers (both JavaScript and Python) call tool handlers directly without dynamic code execution from external input, relying on predefined tool logic. The security of the *generated* server's custom tools will depend on the developer's implementation, but the scaffolding framework provides a secure base. Network risks are inherent to any server exposing an API, but the templates use standard web frameworks and include CORS headers where appropriate.