Keeper's MCP secrets teardown: plaintext config credentials, sprawl, and over-permissioning that survives into production
The Hacker News published a piece on Aug 17, 2026 (Ashley D'Andrea, Keeper Security) arguing MCP servers hold the keys to everything they touch — credentials, service account keys, API tokens — and are routinely deployed without protection. It enumerates five vectors: plaintext credential storage in config files, credential sprawl across servers with no central inventory or rotation, prompt injection that manipulates agents into misusing credentials, dev-time over-permissioning that persists to production, and untrusted MCP servers executing malicious code (citing CVE-2025-6514). It is vendor-authored and prescriptive rather than new research, so treat the framing accordingly, but the inventory-and-rotate advice is sound and unglamorous.
↳ Follow the thread