Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-03 · high
Both SDKs shipped the same class of fix within days of each other, which reads like an internal audit, not a bug report.
Why now: The JS fix is two days old and the Python patches barely older, so most MCP integrators running these SDKs probably haven't upgraded past the vulnerable versions yet.
OpenAI shipped Agents SDK for JavaScript version 0.14.2 on August 1, and nearly every change in it closes a credential leak, per the GitHub release.
For anyone running Model Context Protocol servers through the SDK, that's not a cosmetic release. Error messages and diagnostic metadata could have been printing secrets that should've stayed hidden.
Maintainer seratch made four fixes in the release. The SDK now rejects ephemeral paths during sandbox archive hydration that looked like path traversal attempts. It also keeps sandbox environment secrets as references instead of inlining the actual values.
It redacts endpoint credentials from MCP transport error messages and strips MCP URL credentials out of external metadata. It also cleans MCP servers before reconnecting them.
The Python SDK got the same class of fix, in versions 0.19.1 and 0.19.2.
Two separate codebases, two separate release trains, closing the same category of credential exposure in the same window. That looks like an internal audit that found the same mistake sitting in both SDKs, not bug reports trickling in one at a time.
If you're building anything that logs MCP transport errors, that's worth an afternoon of your own code. Credentials end up interpolated into exception messages more often than people expect. "We'll redact it later" is how they end up in a log aggregator nobody meant to expose.
Each link below shares sources, entities, or timing with this story.
LLM uses OpenAI / Shared entities / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (LLM uses OpenAI); both cover MCP, OpenAI; reported by the same outlet (github.com).
OpenAI supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI supports MCP); both cover Check, MCP; overlapping topics (agent, check, credential).
SaaStr uses OpenAI / Shared entities / Earlier coverage
Linked by a graph relationship (SaaStr uses OpenAI); both cover Check, MCP, OpenAI; earlier Check coverage from 2026-07-28.
OpenAI released OpenAI Agents SDK / Shared entity: MCP / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI released OpenAI Agents SDK); both cover MCP; reported by the same outlet (github.com).
Hermes Agent supports OpenAI / Shared entity: OpenAI / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Hermes Agent supports OpenAI); both cover OpenAI; reported by the same outlet (github.com).
LiteLLM supports OpenAI / Shared entity: Check / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (LiteLLM supports OpenAI); both cover Check; reported by the same outlet (github.com).
OpenAI released Luna / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI released Luna); both cover Check, OpenAI; overlapping topics (agent, check).
OpenAI supports MCP / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (OpenAI supports MCP); both cover MCP, OpenAI; reported by the same outlet (github.com).