serper-mcp-server

The server demonstrates good security practices: - `SERPER_API_KEY` is loaded from environment variables and explicitly checked for existence before use, preventing hardcoding. - Logging redaction is implemented via `RedactingJsonFormatter` and `redact_mapping` to prevent sensitive data from appearing in logs. - The HTTP transport is explicitly marked as a 'stub' and raises a `NotImplementedError`, preventing unhardened HTTP endpoints from being accidentally exposed. - The primary transport is stdio, which is generally safer for inter-process communication. - Input validation with Pydantic schemas is used for tool arguments, mitigating injection risks. - Concurrency limits and request timeouts are configurable, helping prevent resource exhaustion.