Composio CTO @KaranVaidya6 says giving an AI agent your API key is basically making it…
This is a vibe coding post classified by Jev as MCP servers (a launch), kept by the Vibe Coding Radar because it carries real work, not commentary.
Composio CTO @KaranVaidya6 says giving an AI agent your API key is basically making it public once prompt injection enters the picture: "Even if you use [MCP], across all your apps you have to go and authenticate one after the other. If you use Codex, if you switch to ChatGPT, Claude Code, you'll have to do it all over again." "In some cases where MCPs don't exist, you have to literally share the API keys to the agent, which is definitely not secure. It's kind of giving your API key to public." "At some point the agent will find some link which will have prompt injection, and you'll be in a
Posted by MTS (508.6k followers) 2 days ago · 33 likes · 15.5k views · view the original post on X. Kept by the Vibe Coding Radar as MCP servers.
More vibe coding work like this
- GPT-6 Astra x OpenBB is MOST POWERFUL AI trading setups — @RohOnChain
- these 3 animated charts we are completely built with Grok @bot leveraging the @mach33 MCP. — @aaronburnett
- How it feels making CDC pipelines with @artie_labs — @TurnerNovak
- Standing up a production CDC pipeline used to mean designing source access, replication,… — @artie_labs
- AIsa，一个专门给 Agent 接外部数据的平台，一个密钥就能调 5000 多个 API。 — @GitHub_Daily
- Introducing the Knowledge Base MCP. — @greptile
- I added MCP/API support for DataFast mentions & notes. — @marclou
- 5 GitHub Repos That Give Hermes Agent New Superpowers 🪽🚀 — @BkashJosi
Every post is read and classified by Jev (TypeSafe): what it is, which market it belongs to, and whether the link is a real tool. 1.8k posts from 1.8k X accounts over the last 14 days, 141 tools, 12 markets. Collected every 5 minutes, fully re-ranked every hour — last update 2026-09-19 01:18 UTC. Full method.