llm-mcp-bridge

The server correctly handles API keys via environment variables or explicit arguments, avoiding hardcoding. Input validation for tool arguments is implemented using Zod, which helps prevent common injection vulnerabilities. The design allows overriding the LLM base URL and API key per tool call, which is a powerful feature but implies that the calling client needs to be trusted to prevent redirection to malicious endpoints, though this is a characteristic of the MCP protocol itself and not a flaw in the bridge's implementation. No 'eval' or other directly exploitable patterns were found in the provided source.