Skip to content

fix: Claude review - #22

Merged
wayzeek merged 2 commits into
major-mcp-updatefrom
claude/major-mcp-fixes-01WWjvDdUW8uUosEZ69UWKTd
Nov 20, 2025
Merged

fix: Claude review#22
wayzeek merged 2 commits into
major-mcp-updatefrom
claude/major-mcp-fixes-01WWjvDdUW8uUosEZ69UWKTd

Conversation

@wayzeek

@wayzeek wayzeek commented Nov 20, 2025

Copy link
Copy Markdown
Member

No description provided.

- Add express and @types/express to dependencies for production reliability
  * Battle-tested error handling and middleware ecosystem
  * All MCP SDK examples use Express for HTTP transport
  * Minimal overhead (~50KB) with significant reliability gains
- Fix wallet.ts to use viem's documented HDAccount/PrivateKeyAccount types
  * Use getHdKey() method for extracting private key from mnemonic accounts
  * Proper type checking instead of unsafe 'as any' casting
  * Better error messages for debugging
- Update bun.lock with express dependencies

This ensures all MCP transports (stdio, StreamableHTTP) are production-ready.
Security Fixes:
- Add 10mb JSON body size limit to prevent DoS attacks
- Validate EVM_ACCOUNT_INDEX to prevent NaN injection
- Add HTTP server timeouts (120s request, 65s keepalive)

Reliability Fixes:
- Implement session cleanup (30min timeout, check every 5min)
- Update session timestamps on activity to prevent premature cleanup
- Prevent memory leaks from abandoned sessions

These changes ensure the server is production-ready and resilient.
@wayzeek
wayzeek merged commit d120f01 into major-mcp-update Nov 20, 2025
@wayzeek
wayzeek deleted the claude/major-mcp-fixes-01WWjvDdUW8uUosEZ69UWKTd branch November 20, 2025 15:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants