julien-poitou

3 ms·

1. 1.▲
   AI agent's API keys are sitting in plaintext(github.com)

   1 points by julien-poitou 7mo ago|1 comments
2. 2.▲
   by julien-poitou 7mo ago

   53% of MCP servers store API keys as plaintext in config files. They get committed to git, shared across machines, exposed in breaches. MCPGuard is a local-first CLI that: - Scans your MCP configs for plaintext credentials - Migrates them
3. 3.▲
   by julien-poitou 7mo ago

   I was auditing my Claude Desktop config and realized my GitHub, Linear, and Notion API keys were sitting in plaintext in ~/.config/claude/claude_desktop_config.json Anyone with read access to that file (malicious MCP server,