policy-document-reader

The server has critical security 'TODO's that make it unsafe for production deployment as-is. Specifically, the 'read_document' and 'list_documents' tools contain 'TODO: Integrate with Vault' and currently use `credentials = {}`, meaning remote access credentials are not actually fetched from Vault, rendering credential paths ineffective. Agent authentication from JWT is also a 'TODO' and defaults to a hardcoded 'agent_id'. CORS `allow_origins=["*"]` is configured, which is a risk in production environments if not restricted. While positive features like PII redaction, input validation, audit logging, and size limits are present, the incomplete critical integrations are a severe vulnerability.