MCP configurations — Potion docs
Potion

MCP

MCP configurations

Configure local and remote MCP servers without exposing stored secrets or weakening network controls.

Potion stores ordinary MCP values separately from encrypted secret envelopes. Saved secrets are masked after submission and generated client exports contain environment references, never plaintext.

Client exports

Exports are available for Clawk, Claude Code, Codex, OpenCode, Cursor, and generic JSON. Set every referenced environment variable in the destination client before starting the server.

Connection safety

Local stdio validation stays on the user’s machine. Remote checks require HTTPS, resolve DNS before connecting, pin the approved address, reject redirects, and enforce strict timeouts.