Login
From:
The Trail of Bits Blog
(Uncensored)
subscribe
Insecure credential storage plagues MCP
https://blog.trailofbits.com/2025/04/30/insecure-credential-storage-plagues-mcp/
links
backlinks
This post describes how many examples of MCP software store long-term API keys for third-party services in plaintext on the local filesystem, often with insecure, world-readable permissions.
Roast topics
Find topics
Find it!