uspto_ptab_mcp

The server demonstrates robust security practices. API keys are handled securely via OS-specific (Windows DPAPI) or file permission-based secure storage with `secrets.token_bytes` for entropy. Extensive input validation (`src/ptab_mcp/validation/validators.py`) prevents common injection attacks (e.g., SQLi, XSS). All log messages are automatically sanitized to prevent sensitive data exposure and log injection (`src/ptab_mcp/shared/log_sanitizer.py`). Network communications use `httpx` with SSL verification, and include rate limiting, circuit breakers, and request body size limits. The FastAPI proxy server implements comprehensive security headers (X-Frame-Options, CSP, etc.) and strict CORS policies. File permissions for secure storage and log files are correctly enforced (0o600/0o700).