Episode Details

Daniel wants to run a central MCP gateway on a home server, with every tool pulling its secrets from 1Password. The hard part isn't the firewall — it's how the keys get onto a headless box, and what happens the first time one rotates. This episode walks through three approaches: 1Password service accounts with secret references, copying a .env file across the LAN, and standing up a cloud secrets manager for thirty variables. Along the way: why "sync" is the wrong word for what he wants, what breaks secret references (it's the names, not the values), the rate limits a boot-looping container can burn through, and the one credential you can never design away — secret zero. Episode 6124 — myweirdprompts.com/n/6124 (permanent short link: myweirdprompts.com/083819)