Security
API Keys
Use environment variables, never hardcode:
<span class="hljs-punctuation">{</span><span class="hljs-attr">"mcp"</span><span class="hljs-punctuation">:</span><span class="hljs-punctuation">{</span><span class="hljs-attr">"env"</span><span class="hljs-punctuation">:</span><span class="hljs-punctuation">{</span><span class="hljs-attr">"API_KEY"</span><span class="hljs-punctuation">:</span><span class="hljs-string">"${API_KEY}"</span><span class="hljs-punctuation">}</span><span class="hljs-punctuation">}</span><span class="hljs-punctuation">}</span>
Input Validation
Always validate:
<span class="hljs-keyword">if</span> (<span class="hljs-keyword">typeof</span> input !== <span class="hljs-string">"string"</span>) <span class="hljs-keyword">return</span> { <span class="hljs-attr">error</span>: <span class="hljs-string">"Invalid"</span> };
Security
API Keys
Use environment variables, never hardcode:
<span class="hljs-punctuation">{</span><span class="hljs-attr">"mcp"</span><span class="hljs-punctuation">:</span><span class="hljs-punctuation">{</span><span class="hljs-attr">"env"</span><span class="hljs-punctuation">:</span><span class="hljs-punctuation">{</span><span class="hljs-attr">"API_KEY"</span><span class="hljs-punctuation">:</span><span class="hljs-string">"${API_KEY}"</span><span class="hljs-punctuation">}</span><span class="hljs-punctuation">}</span><span class="hljs-punctuation">}</span>Input Validation
Always validate:
<span class="hljs-keyword">if</span> (<span class="hljs-keyword">typeof</span> input !== <span class="hljs-string">"string"</span>) <span class="hljs-keyword">return</span> { <span class="hljs-attr">error</span>: <span class="hljs-string">"Invalid"</span> };