gpt-mcp-server

The server implements robust security measures including path normalization to prevent traversal, a whitelist-based approach for allowed directories, blacklisting of sensitive file and directory patterns (e.g., .env, .git, .ssh), and file size limits to prevent Denial of Service. It defaults to read-only access, requiring explicit configuration for write operations. Sensitive content masking is also available for output. While `rate_limit` is configured in `config.yaml` and `SecurityConfig`, its explicit enforcement within the provided `SecurityLayer` code is not directly visible.