{"version":"2.1.257","anchor":"mcp-server-env-var-scrubbing-for-allowdeny-display-now-cove","canonical_anchor":"mcp-server-env-var-scrubbing-for-allowdeny-display-now-cove","heading":"MCP server env-var scrubbing for allow\/deny display now covers a fallback env too","tier":"internal","area":"MCP","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/mcp-server-env-var-scrubbing-for-allowdeny-display-now-cove","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### MCP server env-var scrubbing for allow\/deny display now covers a fallback env too\n\nEnv-var masking in allow and deny server displays now also covers a fallback env source.\n\nThe env-var scrubbing used when building `deniedMcpServers` and `allowedMcpServers` display lists now also redacts and normalizes a fallback env source (`yxn().fallbackEnv`) in addition to the primary env map, so MCP server commands and URLs shown for allow\/deny rules stay masked regardless of which env the values came from.\n\n- Area: MCP\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}