Most of the MCP clients do it correctly and store securely in the system keychain. If you’re using an API are you doing that too? Or is it in a plain text file .env ?

→ View original post on X — @jiquanngiam