I've seen it happen more than once in production logs: an AI agent, given access to a database or a third-party API via MCP, returns a payload that includes not just the requested data, but also a session token, an AWS secret, or an obscure API key. It feels like a minor oversight until you real...
Source: [Dev.to](https://dev.to/renato_marinho/stop-leaking-secrets-into-your-llm-context-windows-5dm5)