[deadbabe]

Instead of bending over backwards to secure an MCP server why not just run it as an OS user with very limited minimal permissions?