Tokens

#2
by Chris4K - opened
Agents-MCP-Hackathon org
edited 8 days ago

Hi,
Is this intended:
trello_token = gr.Textbox(
label="🔐 Trello Token",
placeholder="Your Trello token",
type="password",
info="A token generated from your Trello account.",
value=os.getenv("TRELLO_TOKEN")
)
This way you expose your keys in the frontend.
Simple open the developer tools and change the input type from password to text and .... all key are exposed.

Btw, I like your space any way. I will add it to my game world with some minor changes ;)

Chris

Agents-MCP-Hackathon org
edited 7 days ago

Hi Chris,
Thanks a lot for pointing that out — we’re fully aware of it.
For this demo, we’ve created dedicated GitHub and Trello accounts, so there’s nothing sensitive being exposed.
Also, PMCP is designed to allow almost any kind of interaction with Trello. So even without direct access to the token, users can already perform any kind of modification.

Really glad to hear you like the Space!
Keep us posted on any changes or new features you add 😊

Caje

CalleCaje changed discussion status to closed

Sign up or log in to comment