Agent Builder MCP Secrets API

Unfortunately, I think this is at least partly by design. The Responses API docs say MCP authorization values are not stored and must be supplied on each request, likely for security reasons. For hosted Agent Builder, I haven’t found a documented API to update MCP secrets programmatically. The workaround seems to be either running the workflow through your own backend so you can inject a fresh token per request, or putting a small proxy MCP server in front of the upstream service and handling token rotation there. So for this particular case, using MCP directly inside hosted Agent Builder feels more suitable for prototyping than production, especially if the credential rotates every hour. I use it though for my ChatKit+FileSearch. It works well on that (prod), but not with mcp