Pydantic AI keeps MCP tokens out of traces
Pydantic AI users, update now: two Medium security fixes are out, one for MCP credentials that could reach OpenTelemetry traces and one for the Vercel AI and AG-UI adapters.
Upgrade to 2.58.0, or 1.107.8 on v1, then restrict access to old traces and rotate any credentials they exposed.