mcp-servers

The server uses environment variables for sensitive credentials (e.g., REDASH_URL, REDASH_API_KEY, PostgreSQL credentials, Kubeconfig), which is good practice. There are no obvious code obfuscation or direct 'eval' patterns. However, several tools (e.g., Redash's `create_query`, `execute_query`, PostgreSQL's `mcp__execute_query`, Kubernetes' `exec_in_pod`) allow the execution of arbitrary SQL queries or shell commands. While this is an intended feature for an agent-based system and relies on the security of the underlying APIs (Redash, Postgres, Kubernetes) to prevent direct injection, it grants high privileges to the calling agent/LLM. Misuse by an untrusted or unconstrained agent could lead to data exposure or unauthorized operations.