1 files changed, 5 insertions, 0 deletions

diff --git a/.gitignore b/.gitignore
index 4c66e3b..94b983f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,8 @@
 
 # Claude config — settings.local.json is per-machine, never commit
 .claude/settings.local.json
+
+# MCP plaintext secrets and decrypted-at-runtime credentials
+# (only the .gpg counterpart is safe to commit)
+mcp/secrets.env
+mcp/gcp-oauth.keys.json