LLMs don't need your secret tokens (but MCP servers hand them over anyway): https://00f.net/2025/06/16/leaky-mcp-servers/ https://00f.net/2025/06/16/leaky-mcp-s

LLMs don't need your secret tokens (but MCP servers hand them over anyway): https://00f.net/2025/06/16/leaky-mcp-servers/ https://00f.net/2025/06/16/leaky-mcp-servers/ Encrypting sensitive data can be more useful than blocking entire requests, as LLMs can reason about that data even without seeing it in plain text. The ipcrypt-pfx and uricrypt prefix-preserving schemes have been designed for that purpose.