kit-mcp-server

The server demonstrates a strong 'security-first' approach. All write operations (creating broadcasts, adding subscribers, creating tags/tagging) require explicit user approval via an internal approval queue. Critically, 'delete_broadcast' and 'unsubscribe' operations are explicitly forbidden. API keys are loaded from environment variables (recommended to be configured in Claude Desktop config), preventing hardcoding. The 'local-first' workflow for email drafts ensures content review before any external API calls. The server runs entirely on the user's machine, limiting network exposure. No 'eval' or other dynamic code execution that could be exploited was found. The code relies on the `@modelcontextprotocol/sdk` for safe tool invocation.