Upstream contribution · smart-mcp-proxy/mcpproxy-go
mcpproxy-go · Preserve existing credential references during conversion
Problem
MCPProxy's conversion API recognized a narrow set of reference prefixes. A file reference or a reference embedded in an Authorization header could be put into the keyring as literal text and left unresolved after the next expansion.
Engineering response
Use the shared reference detector before writing a new secret. The conversion endpoint returns its existing validation error when it finds a reference anywhere in the value.
Evidence and scope
The pull request reports two regressions for file and embedded references and a passing HTTP API package suite. The tests cover rejection before secret resolution.