MCP servers can leak enterprise secrets via configs and prompt injection

MCP servers hold credentials, service account keys and API tokens, and can leak them through plaintext config files, over-permissioned access and prompt injection — often before security teams know a server is running. MCP is the open standard, introduced by Anthropic, that lets AI agents reach live systems and act on them.