SerialMemoryServer

The project uses parameterized queries for PostgreSQL, mitigating SQL injection risks. Environment variables are used for sensitive configurations (e.g., database credentials), though default values for local development are present. HTTP services for ML inference are exposed locally (ports 8765, 8766 in tools directory) which would require proper firewalling in a production environment. The Ollama-based extraction service (tools/extraction_http_service.py) uses HTTP calls to a local Ollama instance, which is generally safe for local use but could be a vector if configured to a malicious remote endpoint (not the default setup). The Python MCP server itself is STDIO-based, limiting direct network exposure.