Security aspects

Security is a huge topic, but let’s discuss it in the context of using an editor. There are things you can do generally to stay safer, so let’s try to summarize a good list of practices:

• Keep secrets out of configuration: Here’s how you can do that by specifying the configuration in the mcp.json file:

  {
    "mcp": {
      "inputs": [
        {
          "type": "promptString",
          "id": "my-key",
          "description": "Token for my API",
          "password": true
        }
      ],
      "servers": {
        "my-server": {
          "type": "http",
          "url": "https://my-secure-api/mcp",
          "headers" : {
            "Authorization": "Bearer ${input:my-key}"
          }
        }
      }
    }
  }
  

By using the inputs element, you can ensure that secrets...