partsbox_mcp

The server securely handles the `PARTSBOX_API_KEY` via environment variables, explicitly warning users about its sensitivity. Docker containers are configured to mount the `.env` file read-only, enhancing security. Error masking can be enabled to prevent leakage of internal error details to clients, a good practice for production. The JMESPath custom `regex_replace` function processes user-provided patterns, which carries a theoretical, but low, risk of a Regular Expression Denial of Service (ReDoS) if extremely complex and malicious patterns are supplied. File downloads using `get_image` and `get_file` rely on `file_id` values obtained from the trusted PartsBox API, limiting direct SSRF risks from arbitrary user input.