@ai-ecoverse/mcpcat 0.31.10 → 0.31.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/host/mcpcat.mjs +199 -131
- package/dist/kernel/mcpcat.mjs +199 -131
- package/dist/skills/mcpcat/SKILL.md +1 -1
- package/package.json +1 -1
|
@@ -87,7 +87,7 @@ mcpcat serve --help
|
|
|
87
87
|
- **Never print, echo, log or paste a secret's value**, not in a command, a file, a message or your answer. The value must never reach the conversation.
|
|
88
88
|
- **Use `${NAME}` placeholders in single quotes**: `-H 'Authorization: Bearer ${GH_TOKEN}'`. mcpcat expands them itself, so the value stays out of argv. In seven, `NAME` holds the vault's placeholder, and the vault fills in the value where a secret rule allows that host.
|
|
89
89
|
- **Never put a token into `mcp.json`.** Write `${NAME}` there too; `mcpcat add` refuses a literal `Bearer …` value.
|
|
90
|
-
- `-v` traces show expanded headers as `[REDACTED]
|
|
90
|
+
- `-v` traces show expanded headers as `[REDACTED]`, and so do errors and results. Don't try to work around redaction.
|
|
91
91
|
- If a request needs a secret that isn't there, ask the user to add it to the vault; don't ask them to paste it.
|
|
92
92
|
|
|
93
93
|
## Upgrade
|