Multi-user systems: On shared workstations or servers, other users with file system access could read credentials stored in world-readable files. On shared workstations or servers, other users with file system access could read credentials stored in world-readable files. As for users, the best they can do is to carefully review the software they install in their environments and only use MCP servers that either use OAuth or store credentials using a secure operating system API.