Dev builds mcp-warden so AI agents can request actions instead of holding plaintext API keys
Relevant_Mousse_9117 · reddit · 2026-10-28
After finding GitHub and Stripe API keys in plaintext in /.claude.json — readable by any agent with file access — a developer built mcp-warden, an open-source local MCP server in Rust. Keys live in the OS keychain; agents never receive tokens and instead request actions, which are checked against an allow-list, credential-injected, and returned as results only. Risky actions trigger Telegram approve/deny. Key lesson: while building it, the author broke his own allow-list three times (%2e%2e path traversal, an encoded slash nginx decoded, and a regex | that turned 'uptime|df -h' into run-anything). Works with any MCP client, no cloud, no telemetry; he's soliciting bypass #4.
More from coding & agent
- Personal AI agent trains a chess transformer on dual RTX 4090 and battles Sunfish — andreisavu · 2026-10-28
- FrontierCode 2: Anthropic models burn 2-3x tokens, cost 10-50x more than open rivals — bookwormengr · 2026-10-28
- Opus 5.5 ultracode workflow with 9 subagents builds a Three.js scene — nptacek · 2026-10-28
- Agent sandboxes talk at PLATFORMday SF: the missing runtime for AI — gethackteam · 2026-10-28
- Claude + FullEnrich MCP: 30-second setup maps Linear's entire org with 20 verified emails — socialwithaayan · 2026-10-28
- FullEnrich results: 20 manager-level contacts at Linear, 20 work emails, 20 credits — socialwithaayan · 2026-10-28