markitdown-mcp

The server demonstrates robust security measures, including comprehensive input validation (path traversal, dangerous XML/JSON/CSV patterns), base64 content validation with size limits, explicit output sanitization (Unicode, output size limits), `hmac.compare_digest` for timing attack prevention, `threading`-based timeouts, and `sys.setrecursionlimit` to prevent recursion bombs. It enforces 'safe working directories' to restrict file system access. Error messages are sanitized to prevent information disclosure. While highly secure, no system is perfectly impenetrable, and reliance on an external MarkItDown library for core conversion means some vulnerabilities might theoretically exist within that dependency.