Skip to content
Insecure credential storage plagues MCP
blog.trailofbits.com | blog | #mcp | #secrets-management | #llm-security | #vulnerabilities | #trail-of-bits | #credential-storage | #api-keys
Summary
This post describes how many examples of MCP software store long-term API keys for third-party services in plaintext on the local filesystem, often with insecure, world-readable permissions.
- Published
- Collected