tyomarkkinatori_mcp_server

The server includes good security practices such as input validation for codes and municipality names, using Pydantic models for API request structure with length constraints, and a timeout for external HTTP requests. When run via Docker, it uses secure container options like `--read-only` and `--cap-drop=ALL`. No direct 'eval' or hardcoded secrets were found. Data files are local and validated at startup. However, the external API call response content is not explicitly sanitized before being returned to the LLM, which could, in theory, contain malicious content if the Työmarkkinatori API were compromised (though highly unlikely for job listings).