plane-mcp-server

The server securely retrieves sensitive credentials (API key, workspace slug) from environment variables, preventing hardcoding. Input parameters for tools are rigorously validated using Zod schemas, which helps mitigate common injection vulnerabilities. All external network requests are handled through Axios, a well-regarded HTTP client, with explicit content-type headers for non-GET requests. There are no observed uses of 'eval', code obfuscation, or other suspicious patterns that would indicate malicious intent. The code structure is clear and follows standard practices, making it relatively safe to run provided the environment variables are kept secure.