mcp-sdk-go

The SDK provides robust foundations, including schema validation for tool inputs (with `AddTool[In,Out]`), and middleware hooks for authentication, rate limiting, and recovery. Examples demonstrate basic path traversal protection for file operations. However, comprehensive security (e.g., thorough input sanitization for generic tool handlers, robust authentication for HTTP transports beyond basic validation, fine-grained access control) depends on the developer's implementation using the provided features. The `Access-Control-Allow-Origin: *` in SSE transport might be overly permissive for some deployments. OAuth 2.1 authorization is planned, suggesting current HTTP transports lack built-in robust auth.