Can I redact secrets from a trace before sharing it?

[adityachilka1]

I want to share a trace for debugging but it contains API keys in the env or arguments.

[adityachilka1]

The recorder doesn't currently strip secrets automatically. Tracked in #issue-redaction (or open a new one if it's still missing).

For now, the format is one gzipped JSON-RPC frame per line, so you can post-process with a small script:

zcat trace.mcptrace | jq -c 'walk(if type == "string" then gsub("sk-[A-Za-z0-9]+"; "sk-REDACTED") else . end)' | gzip > trace.redacted.mcptrace

Replace the regex with whatever patterns match your secrets.