GitGuardian's 2026 secrets report quantifies the AI credential leak problem:

- AI-assisted commits: 3.2% leak rate (2x baseline)
- 24,008 secrets in MCP config files
- 64% of 2022 secrets still unrevoked

MCP docs themselves encourage inline API keys. Tooling hasn't caught up.

https://mistaike.ai/blog/ai-coding-agents-leak-secrets

#InfoSec #CyberSecurity #AIAgent #MCPProtocol #SecretsManagement