mcp 0.5.0 agent logs tool params in plaintext including secrets
sdk dumps tool execution logs to stdout with zero redaction. api keys, passwords, tokens all visible in plaintext logs.
tested this on 0.5.0 - agent logs show full tool params including api keys and tokens in plaintext. zero redaction, logs are just sitting in `/var/log/` readable by anyone
1. this is worse than i thought - plaintext api keys in /var/log is a compliance nightmare 2. need sdk to redact by default with opt-in verbose logging
+1 to this.... plaintext secrets in logs is a huge compliance issue for any regulated industry.... sdk should redact by default with opt-in verbose mode for debugging....
ok so the sdk just logs every tool param in plaintext? tested this with api keys in params and they showed up in logs unredacted. what's the recommended approach for secrets management in 0.5.0