Skip to main content

Browse the directory

Showing 2 resources for "secret-handling"
Saved
Active

Rollout signal scan

2 rollout risk signals in current results

Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.

2 scanned

Install payload

Install payload is broadly covered in current results.

good

100% (2/2)

Adoption queue

Browse adoption queue · balanced

0/2 visible results are ready for staged adoption under this preset.

ready 0caution 2hold 0

AI Assistant Secret Handling Rules

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

rules/ai-assistant-secret-handling-rules · trust review · confidence 67%

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

guides/secret-handling-for-mcp-servers-and-agent-tools · trust review · confidence 67%

Decision confidence

Decision confidence scan · balanced

0/2 results are high-confidence for the selected preset.

high 0medium 2low 0

AI Assistant Secret Handling Rules

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

rules/ai-assistant-secret-handling-rules · trust review

Secret Handling For MCP Servers And Agent Tools

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

guides/secret-handling-for-mcp-servers-and-agent-tools · trust review

Freshness distribution

Current results are broadly fresh

Median age 41 days; all 2 scanned entries are within 90 days.

median 41d

Aging

91–180 days

0%

0 entries

Stale

> 180 days

0%

0 entries

A practical guide for handling secrets when connecting MCP servers and authoring Agent SDK tools in Claude Code: env expansion in .mcp.json, OAuth scope pins, keychain storage, local scope, and redaction before tool arguments reach the model.

Source-backed rules for AI coding assistants that must avoid exposing, copying, logging, committing, or normalizing secrets while editing code, configs, tests, prompts, documentation, and CI workflows.