A secure wrapper that launches other MCP servers, replacing environment secrets with placeholders and eliciting them via an encrypted browser form, never exposing secrets to the model or client.