jenkins_mcp_server

CRITICAL: The `JenkinsClient` explicitly disables SSL/TLS certificate verification by default for all `requests` calls (`verify=False`). This makes the server vulnerable to Man-in-the-Middle (MITM) attacks, allowing an attacker to intercept and manipulate communication with the Jenkins server without detection. While `cli.js` attempts to download and set a corporate CA bundle, the explicit `verify=False` in the Python code overrides this, rendering the connection insecure. This is a severe security vulnerability, especially for a tool interacting with critical CI/CD infrastructure. No `eval` or obfuscation found, and credentials are externalized, but the fundamental network security flaw is paramount. Therefore, it is NOT safe to run in any production or sensitive environment without code modification to enable proper SSL/TLS verification.