Hush Security Finds Hardcoded Secrets in 12% of Public MCP Credential Slots

Sep 17, 2026
Hush Security found hardcoded secrets in 12% of credential slots across roughly 82,000 public Model Context Protocol configuration files.
Hush Security Finds Hardcoded Secrets in 12% of Public MCP Credential Slots

Hush Security found hardcoded secrets in 12% of credential slots across roughly 82,000 public Model Context Protocol configuration files, the company said in a press release. The files were used by coding agents including Claude Code, Cursor, VS Code, Windsurf, Gemini, OpenAI Codex and JetBrains.

The exposed credentials included GitHub personal access tokens, Anthropic and OpenAI API keys, Slack and Notion workspace tokens, and database connection strings with embedded passwords. Hush said 55% of the secrets lacked recognizable token patterns used by tools such as gitleaks and GitHub secret scanning.

Among credentials with a defined scope, 53% provided access across an organization, account, workspace or database. Of those with a defined expiry policy, 80% did not expire by default. Hush also found 1,394 secrets in current files and 243 deleted secrets that remained accessible through Git history.

We hope you enjoyed this article

Consider subscribing to one of our newsletters like Cybersecurity AI Weekly, AI Programming Weekly or Daily AI Brief.

Also, consider following us on social media:

Cybersecurity AI AI Brief AI Brief (X)
Free newsletter

Cybersecurity AI Weekly

Weekly newsletter about AI in Cybersecurity.

Guide
AI app builders

AI app builders

Tools that turn a description into a working web or mobile app, and the platforms companies use to build internal tools with AI

Industry analysis

2025 Global Business Services Agenda: Gen AI Takes Center Stage

The Hackett Group

This industry analysis by The Hackett Group explores the transformative impact of generative artificial intelligence (Gen AI) on global business services (GBS) in 2025. The study highlights the shift from exploration to acceleration of Gen AI initiatives, with 89% of executives advancing these projects to improve customer satisfaction, innovate products, and reduce costs. The report also discusses the challenges and strategies for successful Gen AI adoption, emphasizing the need for a technology-enabled operating model and the importance of reskilling the workforce.

Read more

You may also like

Free, six days a week

Daily AI Brief: the AI news that matters, in your inbox.