S'd keep MCP tokens out of plain JSON and give each agent its own narrow key. … · @yinpengxuan · TwKit

@yinpengxuan

S'd keep MCP tokens out of plain JSON and give each agent its own narrow key. Do you rotate yours?ItepSecurity's writeup on the hijacked Bitwarden CLI (npm 2026.4.0) put ~/.claude.json and MCP configs on the same target list as SSH keys and .npmrc.

曝光 2 · 评论 0 · 点赞 0 · 书签 0