postgres-dynamodb-mcp-server

The server uses `boto3` for AWS interactions, which generally handles credentials securely via standard AWS configuration (`aws configure` or environment variables). No hardcoded secrets or `eval`/`exec` statements were found. A minor potential risk exists in dynamically constructing DynamoDB `FilterExpression` and `UpdateExpression` parameters where attribute names are derived directly from user input. While `ExpressionAttributeValues` secures the actual data values, malformed or unexpected attribute names from input could theoretically lead to less optimal queries or unexpected behavior, though DynamoDB's API is generally robust against such injections in attribute names. The server itself runs via stdio and does not expose direct network interfaces.