coinbase-mcp-server

The server's primary function is real-money cryptocurrency trading, which inherently carries financial risk, explicitly warned about in the README. It requires sensitive Coinbase API credentials (API Key Name and Private Key) which are loaded from environment variables and explicitly excluded from version control (.env). Input validation is performed using 'zod' schemas, reducing the risk of malformed requests. No direct 'eval' or other obvious code vulnerabilities are present. The main security concerns are operational: potential for financial loss due to trading decisions or misconfiguration, which the project mitigates through features like 'dry-run' mode and strong warnings about risk.