docmost-mcp

The server retrieves credentials (username and password) from environment variables or command-line arguments. While environment variables are a standard secure practice, passing sensitive information directly via command-line flags (e.g., `-docmost-pass`) can expose it to other processes on the same system (e.g., via `ps aux`). The internal client handles authentication and uses `Bearer` tokens for subsequent requests. Input parameters are handled via `url.Values` encoding, which prevents direct injection issues at the gateway level. Overall security largely depends on the underlying Docmost API's robustness.