Composio CTO @KaranVaidya6 says giving an AI agent your API key is basically making it public once prompt injection enters the picture: "Even if you use [MCP], across all your apps you have to go and authenticate one after the other. If you use Codex, if you switch to ChatGPT, Claude Code, you'll have to do it all over again." "In some cases where MCPs don't exist, you have to literally share the API keys to the agent, which is definitely not secure. It's kind of giving your API key to public." "At some point the agent will find some link which will have prompt injection, and you'll be in a bad place where your key is gone and all your data is public." "We launched Shared Connections where you can share, let's say, an analytic software across the team, or DataDog for debugging, so you don't have to share one password or API keys to every single person." @composio