console-mcp-server

The server includes an `/mcp-internal` endpoint that explicitly bypasses authentication and proxies specified headers. While intended for use within a trusted network, its presence poses a significant security risk if the server is not deployed in a truly isolated and trusted environment, as it could expose sensitive APIs without proper authentication enforcement at the code level. Review of `miactl-cache.ts` shows file system interaction for loading deprecated local tokens; while `sha256` is used for cache paths, any potential manipulation of the `endpoint` leading to arbitrary file reads (though not immediately obvious with current hashing) warrants caution. Input validation is generally strong due to `zod` usage.