conduit_mcp

The server leverages Phoenix's robust security features. It explicitly guides users to use environment variables for secrets (e.g., `MCP_AUTH_TOKEN`, `SECRET_KEY_BASE`) and provides comprehensive parameter validation using NimbleOptions, including type checking, constraints (min/max, length), enums, and custom validators, which mitigates common injection and malformed input risks. Configurable authentication strategies (Bearer Token, API Key, Custom Function) and CORS settings allow for secure deployment. The core library's stateless, pure-function architecture minimizes state-related vulnerabilities. No direct `eval` or arbitrary code execution mechanisms are evident in the provided runtime code.