From 09b79e3b60517d70e288d9a13af2b096fec85d95 Mon Sep 17 00:00:00 2001
From: Kyle Isom <kyle@imap.cc>
Date: Sun, 20 Sep 2026 15:00:00 -0700
Subject: [PATCH] Remove hardcoded Gitea token from .mcp.json

The token was committed in 5baf12e and is visible on the public GitHub
mirror. Read it from the environment instead; Claude Code expands
${GITEA_ACCESS_TOKEN} in .mcp.json. The old token remains in history and
must be treated as burned.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 .mcp.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.mcp.json b/.mcp.json
index 204af1f..7126537 100644
--- a/.mcp.json
+++ b/.mcp.json
@@ -5,7 +5,7 @@
       "command": "/home/kyle/.local/bin/gitea-mcp",
       "env": {
         "GITEA_HOST": "https://git.wntrmute.dev",
-        "GITEA_ACCESS_TOKEN": "873c9bf3ef872e11ca8811621dba0d7e3762cad9"
+        "GITEA_ACCESS_TOKEN": "${GITEA_ACCESS_TOKEN}"
       }
     }
   }