Development

Kiro MCP Settings

Kiro MCP settings can contain MCP server definitions, tokens, and local integration secrets.

Metadata

id: development.kiro-mcp-settings
category: development
sensitivity: critical
subcategory: kiro
artifact types: credential, configuration
tags: kiro, mcp

Path Matchers

Path	Kind	Platforms
`%USERPROFILE%\.kiro\settings\mcp.json`	`file`	`windows`
`$HOME/.kiro/settings/mcp.json`	`file`	`linux`, `macos`

Content Indicators

Literal strings:

mcpServers

Credential Types

api-key
access-token

Impact

credential_access

References

Analyzing TeamPCP's Supply Chain Attacks

Kilo Code Configuration

Kilo Code configuration can contain AI coding tool credentials and local integration secrets.

VS Code MCP Settings

VS Code MCP settings can include local command definitions, HTTP endpoints, and sensitive input variables for agent tool integrations.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References