4 ms·
Claude Code Stores OAuth Tokens in Plaintext
- theozero 1mo agoRelated for secret handling tools like secretspec and varlock (https://varlock.dev https://varlock.dev), there's no way to securely hand claude code sensitive env vars for use with MCP. While it will do env var replacement in your MCP config, there's not really an easy way to set those vars. If using the cli you can wrap the `claude` command (bit awkward), but when running the desktop app, there is nothing. I opened an issue here - https://github.com/anthropics/claude-code/issues/88757 https://github.com/anthropics/claude-code/issues/88757 - please chime in!