Unverified50% confidenceSolutionExact time
Moving the GitHub token out of mcp.json and instead referencing a system environment variable in the launch command or storing it in the operating system keychain to be injected by a script can reduce the risk of plaintext tokens.
1
Sources
50%
Confidence
Long-term
Relevance
10/23/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen the GitHub MCP server starts, it reads the token from an environment variable (commonly GITHUB_PERSONAL_ACCESS_TOKEN).67% similarUnverified即便开发者在发现硬编码密钥后立即删除并重新提交，密钥依然存在于Git的提交历史中，可通过git log或git show命令找回65% similarUnverifiedWhen GitHub MCP is called, it can return MCP-native UI, such as displaying a GitHub user card directly instead of plain text.64% similarUnverifiedGitHub administrator privileges allow modification of branch protection rules, reading or replacing keys in Actions Secrets, tampering with CI/CD pipelines, and adding collaborators to establish backdoors64% similarUnverifiedA GitHub App signs a JWT with its private key, then exchanges it for a short-term installation token to perform operations, and the permission granularity can be precise down to a single repository and specific APIs.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1089092API
curl https://kongchang.com/api/v1/knowledge/claims/1089092MCP
get_claim(id=1089092)