Security: Mask Graphistry credentials in logs, robustly load .env in Python, and ensure no sensitive info is printed in shell or server logs

Author: silkspace

src/graphistry_mcp_server/server.py

@@ -15,6 +15,9 @@
 from typing import Any, Dict, List, Optional, Tuple, Union, cast
 import os
 
+from dotenv import load_dotenv
+load_dotenv()
+
 import graphistry
 import pandas as pd
 import networkx as nx
@@ -32,8 +35,8 @@
 graph_cache = {}
 
 # Debug: Print environment variables for Graphistry
-print(f"[DEBUG] GRAPHISTRY_USERNAME: {os.environ.get('GRAPHISTRY_USERNAME')}")
-print(f"[DEBUG] GRAPHISTRY_PASSWORD: {os.environ.get('GRAPHISTRY_PASSWORD')}")
+print(f"[DEBUG] GRAPHISTRY_USERNAME is set: {os.environ.get('GRAPHISTRY_USERNAME') is not None}")
+print(f"[DEBUG] GRAPHISTRY_PASSWORD is set: {os.environ.get('GRAPHISTRY_PASSWORD') is not None}")
 
 # Register Graphistry client with credentials and API version 3
 print("[DEBUG] Calling graphistry.register() with api=3, protocol=https, server=hub.graphistry.com")

start-graphistry-mcp.sh

@@ -12,10 +12,10 @@ if [ -z "$VIRTUAL_ENV" ]; then
   if [ -d ".venv" ]; then
     source .venv/bin/activate
   else
-    echo "Creating virtual environment with uvx..."
-    uvx venv .venv
+    echo "Creating virtual environment with python3..."
+    python3 -m venv .venv
     source .venv/bin/activate
-    uvx pip install -e ".[dev]"
+    pip install -e ".[dev]"
   fi
 fi
 
@@ -52,7 +52,9 @@ if [ -z "$GRAPHISTRY_USERNAME" ] || [ -z "$GRAPHISTRY_PASSWORD" ]; then
     fi
   fi
 else
-  echo "✓ Graphistry credentials found in environment variables"
+  echo "✓ Graphistry credentials found in environment variables:"
+  echo "  GRAPHISTRY_USERNAME is set: $([ -n "$GRAPHISTRY_USERNAME" ] && echo True || echo False)"
+  echo "  GRAPHISTRY_PASSWORD is set: $([ -n "$GRAPHISTRY_PASSWORD" ] && echo True || echo False)"
 fi
 
 # Check for mode parameter
@@ -78,8 +80,8 @@ echo "Starting Graphistry MCP server in $MODE mode..."
 
 if [ "$MODE" == "http" ]; then
   echo "Server will be available at http://localhost:$PORT"
-  uvx python src/graphistry_mcp_server/server.py --http $PORT
+  python src/graphistry_mcp_server/server.py --http $PORT
 else
   # stdio mode
-  exec uvx python src/graphistry_mcp_server/server.py
+  exec python src/graphistry_mcp_server/server.py
 fi