How MCP Servers Can Expose Enterprise Secrets

The Model Context Protocol (MCP), a new standard allowing AI agents to access enterprise systems and data, introduces significant security risks due to the way it handles secrets. MCP servers routinely store credentials in plaintext, leading to credential sprawl and the potential for attackers to steal sensitive information. To mitigate these risks, organizations must centralize secrets management, enforce least privilege access, use short-lived credentials, and maintain visibility into all MCP servers. Tools like Keeper Secrets Manager can help automate these processes and prevent exposure.