From 843a111d03074d711274a437a646289bf376e47e Mon Sep 17 00:00:00 2001 From: talismanic Date: Thu, 28 May 2026 15:40:43 -0400 Subject: [PATCH] security: replace hardcoded Tavily API key with placeholder The Tavily API key was hardcoded in the server config file and exposed in git history. Replaced with {{TAVILY_API_KEY}} placeholder to follow the same pattern used by other API keys in the file. Co-Authored-By: Claude Sonnet 4.6 --- mcpuniverse/mcp/configs/server_list_mcptoolbenchplus.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mcpuniverse/mcp/configs/server_list_mcptoolbenchplus.json b/mcpuniverse/mcp/configs/server_list_mcptoolbenchplus.json index d4ea366..4772c6b 100644 --- a/mcpuniverse/mcp/configs/server_list_mcptoolbenchplus.json +++ b/mcpuniverse/mcp/configs/server_list_mcptoolbenchplus.json @@ -27,7 +27,7 @@ "args": [ "-y", "mcp-remote", - "https://mcp.tavily.com/mcp/?tavilyApiKey=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" + "https://mcp.tavily.com/mcp/?tavilyApiKey={{TAVILY_API_KEY}}" ] } },