kcmastrpc

Author here. Short version: if your agent needs secrets, the common routes are (1) dump them in its env, (2) materialize a .env file, or (3) give it a shell and let it run bws itself. All three have the same problem: the blast radius is everything the token can touch, and prompt injection turns them into full RCE and sadness.

This wraps the bws CLI as an MCP server with explicit CRUD tools for projects and secrets, plus a bws_run that takes an argv array instead of a shell string. First draft of bws_run accepted "sh -c ..."; that's the eval surface I wanted to remove. Shipped version forces explicit program invocation, and if you genuinely want a shell pipeline you have to put sh as argv[0], which is both visible in audit logs and trivially noticed.

A few things I thought worth calling out:

- Destructive tools (*_delete, bws_run) require confirm: true. Not a safety net (the model will set it); a hook point for your approval tooling so you don't have to pattern-match argument shapes.

- Wraps the CLI, not the Rust SDK. Subprocess + JSON parse is 350 lines. SDK path would have been weeks.

- No mocks in the test suite. Three of four integration tests failed against the real bws binary on first run. Caught a bws secret delete returns-plain-text bug that the JSON-stub protocol tests missed.

Code: https://github.com/kvncrw/bws-mcp-server (GPL-3.0). Issues and PRs welcome, especially from anyone running Vaultwarden with Secrets Manager — I don't have one to test against.

I can relate. Sincerely debating whether I quit my well-paying and comfortable corporate job and just go full-time entrepreneur before the opportunities disappear.

I've tried to incorporate the notion that it's none of my business what other people think of me. I don't always get it right, but having that attitude has helped tremendously on reducing my cortisol levels.

this dude makes some pretty cool content. he built his own fab. highly recommend checking out his other vids.

I’m sure there are plenty of civilizations that have done this, but on the time scale of the universe no one happens to look at just the right moment.

I don't see a reason for my children to have smartphones until they're driving themselves to their own job and social functions.

Right, doesn't everybody just use the same password everywhere? I don't see the point of these things.

[flagged]

As opposed to its previous owners? Don't let those shades get too dark, friend.

What's interesting about these two CEOs is one is definitely interested in selling shovels, the other is interested in selling contracting services that must lease the shovels.

I think you're right though, Meta has real challenges ahead of them in terms of capacity and creating an actual product that can be monetized for the general public. It's worth mentioning that FB was doing AI long before the hype train started really rolling, and monetized it -- all behind the scenes.

I don't think they're supposed to be "hands-on" with the engineering. They literally hire thousands (if not more) to deal with those problems.

https://github.com/facebookresearch -- there's like 1,000ish repo's here.

this is exactly what occurred in barcelona. a huge complex of stadiums and public facilities that are now crumbling.

How would such damages be assessed or proven?

The two aren't mutually exclusive, and that's also a misrepresentation of what I said. I believe I said something to the effect of I don't have a lot of sympathy for them

18-year olds make poor life choices all the time, but not all of those choices have repercussions which last 30-50 years.

A $180,000 at 7% interest would require monthly payments of ~$1,200 to pay down after 30 years. Even at 3% it'd still be ~$750.

I'm really skeptical of these types of articles because they don't tell the complete story about their finances and how they're spending money. In 2013 the median rent in Chinatown was ~$600, and the average salary for a resident was $55,000. After taxes that's roughly $3k/month.

STEM-kids aren't struggling to pay off their college debts. Liberal art degree holders, however.

While I can empathize here as someone with no degree and a job at FAANG, it's hard for me to have a lot of sympathy. I put the blame squarely on these institutions and our government for this situation.

The institutions should be held liable for this debt, not the tax payer, and our government should not guarantee or subsidize these loans. Higher education is important in our society, but the situation we're in now is a complete disaster.

18-year olds taking on huge debt for useless degrees that can't be bankrupted, what could possibly go wrong?

I'm uncertain how these types of posts are supposed to be taken seriously. Is it normal for people to make a big deal about their personal decision to stop frequenting a particular restaurant or store (or website)?

So is this a successor to the DE-10 Nano (the board the MiSTERFPGA project is based on)?

(after looking at corescore probably not, as it'd be way too expensive. that being said, the DE-10 Nano is getting old, are there any potential successors coming)?

cognitive dissonance is real. what is the totl retail now days? like $1500?

I was going to chime in with the lawn darts as well, we had them when I was growing up but luckily no one was impaled.

It's not that the things you mentioned don't matter, it's that employee<>employer relationships are transactional. While I maintain a friendly relationship with all the people I work with, very few are actually friends. If they are, we'll still talk after the relationship with my employer ends.

Unless you have a contract with your employer around the severing of that relationship, neither parties are beholden to each other and any expectation of such behavior is ultimately unproductive and quite unhealthy (mostly for you, $bigTech doesn't care).

Nice work, these types of tools are invaluable and there are well-supported paid options, but not that many OSS projects. There is another project called fast reverse proxy (frp) that has been around for a while, it's open source, however some users are concerned with the country of origin. Never the less, it's probably more mature and well-tested at this point.

https://github.com/fatedier/frp

I suppose the question will be whether or not Couchbase pushed for their logo inclusion prior to payment. This might be negligence on the organizers behalf, however, the marketing department may be better off just paying for the sponsorship regardless.

The author is being controversial for controversy sake, the cynic in me points to "buy my banned book", but we all know how much money authors make off commission, however, this might just elevate her profile enough to collect paychecks for book signings and other appearances.

I'm awfully tired of this charade. Parents have a right to petition their local school boards with regard to what the school administers provision funds toward. In reality, this story is a cover for the more questionable books the school boards have been opting out of in their institutions because the author knows if those were covered most parents would be outright disgusted and possibly mad enough to pick up a pitchfork.

This isn't banning or censorship, its parents having a say what their kids are exposed to. If you don't like that, go petition your school board or buy the book yourself and read it to your child before bed.

This has already happened, someone trained a giant model on 4chan then unleashed on 4chan... hilarious stuff.

https://www.youtube.com/watch?v=efPrtcLdcdM

Best to just not own any Apple products or use their services, IMHO.

I have no sympathy for those who might harm, abuse, and exploit children ... how long until this technology falsely identifies CSAM and results in more victimization (either through false accusations, a botched raid, or death of a family pet).

as i get older the number of services i want to operate locally dwindle. nextdns does a great job, has a number of great implementations that prevent fall through, and works for the entire family regardless of whether or not they're on the local network. great product, great team.

This is what happens when you start losing business to competition: put a price tag on services that were once free to generate new revenue streams.