error-logger-mcp

The server's authentication for remote (LAN) access relies on an optional 4-digit PIN. A critical vulnerability exists where if `ERROR_LOGGER_REQUIRE_AUTH` is set to `true` but `ERROR_LOGGER_PIN` is not configured, remote authentication is *disabled* instead of access being denied. This means remote access might be unintentionally open. Localhost access is exempt. CORS is restricted to local network IPs, limiting exposure. File I/O operations utilize `proper-lockfile` for concurrency control. Input validation includes checks for encoding corruption patterns to prevent data integrity issues, but extensive data validation (e.g., specific string length limits beyond basic checks for all fields) is noted as limited in the documentation.