symfoware-mcp-server

The primary security concern is the `query_database` function, which allows LLM-generated SQL queries to be executed directly against the Symfoware database. While a `SYMFOWARE_SELECT_ONLY` flag exists to restrict operations to `SELECT` statements, it does not prevent SQL injection attacks that could lead to data exfiltration or denial of service through complex queries. The provided documentation does not detail any robust SQL sanitization, parameterization, or allowlisting mechanisms to mitigate these risks. Without the actual C# source code for query execution, a significant risk of SQL injection must be assumed. No 'eval' or obfuscation is apparent, and hardcoded secrets are not visible as the connection string is expected to be an environment variable.