Severity: Medium (Appsec M5)
MCP server tool error handlers return `err.message` directly to clients, potentially exposing database connection strings, internal paths, or stack traces.
Recommendation: Return generic error messages to clients and log full error details server-side only.
Severity: Medium (Appsec M5)
MCP server tool error handlers return `err.message` directly to clients, potentially exposing database connection strings, internal paths, or stack traces.
Recommendation: Return generic error messages to clients and log full error details server-side only.