Skip to content
CCA-F
Tool Design & MCP Integration
medium
Question 3 of 40

A team is configuring a GitHub MCP server in their project's .mcp.json file and needs to include a personal access token. What is the correct and secure approach?

AStore the token value directly in .mcp.json for reliability since the file is already protected by repository access controls
BReference the token using ${GITHUB_TOKEN} syntax so it is injected from an environment variable at runtime
CEncrypt the token with a team-shared key before embedding it in .mcp.json
DStore the token in a secrets.json file in the same directory and reference it by filename in .mcp.json

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion