Stop AI coding agents from reading your .env secrets
Cursor, Claude Code, and every MCP server in your editor can read your .env any time — there's no way to scope them down. The fix isn't hiding the file, it's not having one: import your .env in one command, then inject secrets into the process at runtime instead.