runtime credentials

What’s the safest way to manage API keys for MCP servers?

I'm working on connecting external tools to an LLM through MCP servers. My first approach was to store API keys in environment variables and let the agent use…