{"version":"2.1.219","anchor":"mcp-error-text-is-sanitized-and-credential-redacted-before-d","canonical_anchor":"mcp-error-text-is-sanitized-and-credential-redacted-before-d","heading":"MCP error text is sanitized and credential-redacted before display","tier":"notice","area":"MCP","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.219\/e\/mcp-error-text-is-sanitized-and-credential-redacted-before-d","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.219","markdown":"### MCP error text is sanitized and credential-redacted before display\n\nMCP error messages now hide credentials and strip weird characters before showing them to you.\n\n**What**\n\nServer-supplied error text reaching MCP UI surfaces is now normalized and scrubbed before it is interpolated into user-visible strings, and an invalid URL is no longer echoed back.\n\n**Details**\n\n- Reconnect failures pass the tools-list error through a sanitizer (NFKC normalize, strip angle brackets and quote characters, collapse whitespace, truncate with an ellipsis) before interpolation into \"Reconnected to ..., but fetching tools failed: ...\".\n- The same sanitizer applies to a caught error message in the artifact\/QR surface, and to messages embedded in `Error reconnecting to ` and `Failed to reconnect to `.\n- Bearer, api-key and password-looking values are rewritten to `[redacted]`.\n- MCP conflict notices in the transcript run their `message` and `suggestion` through a control-character stripper.\n- Schema-validation error formatting for MCP goes through the same path.\n- An invalid MCP `url` no longer echoes the URL back; the message is now a fixed string.\n\n**Evidence**\n\n`'url' is not a valid URL. Update the server's config and reconnect.`, `Error reconnecting to `\n\n- Area: MCP\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 0\/5"}