Skip to content

v0.6.0 — encrypted secrets

Choose a tag to compare

@m1ngshum m1ngshum released this 01 Jun 08:22
· 39 commits to main since this release
Immutable release. Only release title and notes can be modified.
49cf495

v0.6.0 — Encrypted secrets

mcpm secrets stores MCP server credentials AES-GCM-encrypted in ~/.mcpm instead of plaintext in client configs; when guard wraps the server, the credential is resolved into its env at launch.

  • mcpm secrets set / list / get --reveal / rm
  • mcpm install --secrets keychain and mcpm up --secrets keychain (opt-in; --ci rejects keychain)
  • mcpm guard disable warns on configs still holding keychain placeholders

Security: injective keychain ids (sanitized + SHA-256), atomic batch writes. Node: dropped 20, added 26 (engines >=22).