How to use this reference
The source recommends secret-free responses and presence indicators. Editorial review principle: define separate execution and presentation representations, then verify that list and detail responses preserve the same field-level disclosure policy.
Before reading
- Integration credentials, response serialization, and object versus field authorization
Context and limits
- Requires MCP enabled, stored administrator-managed secrets, and viewer access to the shared integration.
- CVE-2026-44653: affected v0.8.3 and patched v0.8.4 are listed; patch release date is not established by the advisory. March 13 is the reported test date, not publication.
- Credential reuse and indirect exposure through shared agents are possible extensions discussed by the source, not demonstrated outcomes. No production compromise or award is established.
Sources and provenance
- Shared MCP Server View Leaks Decrypted Admin Secrets LibreChat · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot d5550c789111. Open the complete JSON contract.