Mask MCP header and env values over the API

jacensekai commented

2026-10-13 15:05:25 -04:00

Owner

MCP server headers and env vars usually carry credentials (Authorization
headers, API keys), but GET /api/config returned them in full, so anyone
holding the Lumina token could copy every third-party key out rather
than only use them through the agent.

Every header and env value is now sent as the mask, like the LLM key and
the OAuth client secret. On save, a masked value keeps the one stored
under the same server name and key. A masked value with nothing to keep
(a renamed key or server) is refused with a 400 instead of being saved
as the literal mask, which would silently break the server. The form
hints explain the dots.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

MCP server headers and env vars usually carry credentials (Authorization headers, API keys), but GET /api/config returned them in full, so anyone holding the Lumina token could copy every third-party key out rather than only use them through the agent. Every header and env value is now sent as the mask, like the LLM key and the OAuth client secret. On save, a masked value keeps the one stored under the same server name and key. A masked value with nothing to keep (a renamed key or server) is refused with a 400 instead of being saved as the literal mask, which would silently break the server. The form hints explain the dots. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

jacensekai added 1 commit

2026-10-13 15:05:25 -04:00

Mask MCP header and env values over the API

CI / End-to-end (Playwright) (pull_request) Has been cancelled

Details

CI / Docker images and sandbox (pull_request) Has been cancelled

Details

CI / Compose stack smoke test (pull_request) Has been cancelled

Details

CI / Typecheck, build and test (pull_request) Has been cancelled

Details

1c34d2c1dd

MCP server headers and env vars usually carry credentials (Authorization
headers, API keys), but GET /api/config returned them in full, so anyone
holding the Lumina token could copy every third-party key out rather
than only use them through the agent.

Every header and env value is now sent as the mask, like the LLM key and
the OAuth client secret. On save, a masked value keeps the one stored
under the same server name and key. A masked value with nothing to keep
(a renamed key or server) is refused with a 400 instead of being saved
as the literal mask, which would silently break the server. The form
hints explain the dots.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

jacensekai added 1 commit

2026-10-13 15:05:39 -04:00

Merge branch 'master' into mcp-secret-masking

CI / Typecheck, build and test (pull_request) Successful in 16s

Details

CI / End-to-end (Playwright) (pull_request) Successful in 51s

Details

CI / Docker images and sandbox (pull_request) Failing after 11s

Details

CI / Compose stack smoke test (pull_request) Failing after 6s

Details

3ec2c2b667