Your AI Agent Has Your API Keys (And So Does Every Other Agent)

Open your Claude Code settings.json . Look at the env blocks under your MCP servers. Every API key, every database token, every webhook URL you've put there — your agent has all of them, right now, in its process environment. That might sound obvious. You configured it that way. But think about what it actually means. You've got an MCP server for file operations and one for notifications. The notification server needs a webhook URL. The file server doesn't. But Claude Code doesn't scope credenti