Security

API Keys

Use environment variables, never hardcode:

{"mcp":{"env":{"API_KEY":"${API_KEY}"}}}

Input Validation

Always validate:

if (typeof input !== "string") return { error: "Invalid" };