stateset-mcp-server

The project demonstrates a strong focus on security. It utilizes `dotenv` for environment variable management, preventing hardcoded secrets. `src/middleware/security.ts` implements `helmet` for security headers, robust CORS configuration, request sanitization (removing null bytes), API key validation, and IP whitelisting. Input validation is rigorously enforced using `Zod` schemas (`src/tools/schemas.ts`). Error handling (`src/middleware/error-handler.ts`) is structured to prevent sensitive information leakage and offers actionable suggestions. These measures collectively make the server highly secure.