The latest articles on DEV Community by Misha Hohlovici (@mikehoh). https://dev.to/mikehoh https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4066431%2F880bd05a-be57-4ff1-b32c-381d9480b32f.jpg https://dev.to/mikehoh en Misha Hohlovici Thu, 06 Aug 2026 20:49:46 +0000 https://dev.to/mikehoh/stop-pasting-env-files-in-slack-i-built-an-mcp-server-to-share-secrets-directly-from-my-code-pi2 https://dev.to/mikehoh/stop-pasting-env-files-in-slack-i-built-an-mcp-server-to-share-secrets-directly-from-my-code-pi2 <p>We've all been there. You need to share a <code>.env</code> file or an API key with a teammate. You copy it, switch to Slack or Telegram, paste it, and just hope that chat history never gets hacked.</p> <p>It's a massive security hole, but we do it because it's fast.</p> <p>I wanted to make secure sharing just as fast, but without leaving my AI code editor. So, at my studio Webix Soft, I built Whisper - a client-side encrypted secret sharing tool with a built-in MCP server.</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fmt1j9d65ib1r6jezdn62.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fmt1j9d65ib1r6jezdn62.png" alt="Whisper form" width="800" height="737"></a></p> <h2> The MCP Magic (Why I really built this) </h2> <p>Context switching breaks your flow. If you use AI editors like Cursor/Windsurf or Claude/Codex leaving your code to open a browser and generate a secure link is annoying.</p> <p>With the @webixsoft/whisper-mcp package, you don't have to. You just ask your AI assistant:<br> </p> <div class="highlight js-code-highlight"> <pre class="highlight plaintext"><code>"Create a secure link for my .env file." </code></pre> </div> <p>That's it. The AI uses the MCP tool, encrypts your file locally on your machine, and drops a self-destructing secure link right into your chat. You copy the link, send it to your colleague, and keep coding.</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Flurd6yuc4kzj8ua5upbj.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Flurd6yuc4kzj8ua5upbj.png" alt="Expamle from Codex" width="800" height="561"></a></p> <h2> How the security works (Zero-Knowledge) </h2> <p>Client-side encryption: Your secret is encrypted in your browser (or via the local MCP server) before it ever hits the internet.</p> <p>The Key is in the Hash: The decryption key is generated locally and placed inside the URL hash (like #KEY). Our servers only receive a meaningless ciphertext and never see the key.</p> <p>Burn after reading: When your teammate opens the link, their browser decrypts it locally. Once viewed, the data is wiped from our database forever. We don't even collect IP addresses.</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F7izfbs74l4hldrbgknay.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F7izfbs74l4hldrbgknay.png" alt="Received secret MD file" width="800" height="581"></a></p> <h2> A few extra nice things </h2> <p>Markdown Rendering: If you share a Markdown-formatted config or doc, Whisper renders it beautifully on the other side. You can easily switch to the raw source, copy it, or download it as a file.</p> <p>Dark Mode: Because nobody wants to be blinded by a white screen at 2 AM. You can toggle it on the fly.</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F6fuawao7uqigzendxha8.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F6fuawao7uqigzendxha8.png" alt="Dark theme, env file" width="800" height="538"></a></p> <p>I'd love for you to try it out and hear your thoughts, especially on the MCP workflow!</p> <p>You can check out the web app here: <a href="https://whisper.webixsoft.com/" rel="noopener noreferrer">https://whisper.webixsoft.com/</a><br> And find the MCP package on npm: <a href="https://www.npmjs.com/package/@webixsoft/whisper-mcp" rel="noopener noreferrer">@webixsoft/whisper-mcp</a></p> mcp security productivity showdev