Remove hardcoded Gitea token from .mcp.json
The token was committed in 5baf12e and is visible on the public GitHub
mirror. Read it from the environment instead; Claude Code expands
${GITEA_ACCESS_TOKEN} in .mcp.json. The old token remains in history and
must be treated as burned.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
@@ -5,7 +5,7 @@
|
|||||||
"command": "/home/kyle/.local/bin/gitea-mcp",
|
"command": "/home/kyle/.local/bin/gitea-mcp",
|
||||||
"env": {
|
"env": {
|
||||||
"GITEA_HOST": "https://git.wntrmute.dev",
|
"GITEA_HOST": "https://git.wntrmute.dev",
|
||||||
"GITEA_ACCESS_TOKEN": "873c9bf3ef872e11ca8811621dba0d7e3762cad9"
|
"GITEA_ACCESS_TOKEN": "${GITEA_ACCESS_TOKEN}"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user