Agent Vault vs Continue.dev MCP Server Hub

“The network-layer injection approach is architecturally correct and I'm annoyed I didn't think of it first. This should be standard infrastructure for any team giving agents real API access. The fact that Infisical is behind it gives me confidence it won't be abandoned after a week.”

“The primitive here is clear: a curated registry plus an in-IDE installer that replaces the current MCP setup flow — which is, charitably, 'edit your JSON config manually and pray.' The DX bet is that discovery and install should happen inside the editor, not on a GitHub README, and that is exactly the right call. The moment of truth — adding your first server — is the test, and if it actually resolves the config, sets credentials, and reflects in the AI context without a restart, this is genuinely worth shipping. My only flag is that 200 community-built servers with no quality signal is a registry problem waiting to happen; I want star counts, install counts, or at minimum a verified badge before I trust this in a production workflow.”

“The proxy-based approach introduces a local MITM that itself becomes a high-value attack target. If Agent Vault is compromised, every credential it holds is exposed simultaneously. The API is explicitly unstable ('subject to change') — wait for a stable release before baking this into CI/CD pipelines.”

“Category is IDE-native MCP management; the direct competitor is 'copy the JSON blob from the MCP server's README into your config file,' which is genuinely terrible UX. Continue shipping this is the right call because they've identified the actual friction point in MCP adoption — it's not the protocol, it's the installation ceremony. Where this breaks: any power user with a non-standard monorepo setup, a corporate proxy, or MCP servers that need per-project credential scoping will hit walls fast. The kill condition in 12 months is that VS Code ships a native extension marketplace for MCP — Microsoft has every incentive to own this layer — and Continue's hub becomes redundant overnight unless they've built enough workflow lock-in by then.”

“Prompt injection is going to be the SQL injection of the agent era. Tooling that bakes in zero-knowledge credential handling at the infrastructure level — rather than bolting it on in prompts — is exactly the architecture shift the industry needs. Expect this pattern to become a compliance requirement.”

“The thesis is falsifiable: MCP becomes the dominant context-injection standard for AI-assisted development, and whoever owns the discovery and install layer owns developer mind-share the way npm owns JavaScript package discovery. What has to go right is MCP not getting forked or superseded by a proprietary protocol from Anthropic, OpenAI, or Microsoft in the next 18 months — that's a real dependency, not a vibe. The second-order effect that interests me most is not developer productivity but server economics: if this hub succeeds, it creates a marketplace incentive for SaaS companies to publish MCP servers as a distribution channel, which flips the 'AI needs to integrate with your tool' dynamic into 'your tool needs to publish to AI contexts.' Continue is riding the MCP standardization trend and is early enough that this could become infrastructure, but only if MCP itself doesn't fragment.”

“For creators running agents that touch their Shopify store, social APIs, or payment processors, this is genuinely peace of mind. I don't want to think about whether my coding agent just got manipulated into printing my Stripe key. Agent Vault makes that a non-problem.”

“The job-to-be-done is singular and clean: get an MCP server running in my IDE without touching a config file. That focus is the product's biggest strength — they haven't tried to also be a server-testing tool or an MCP debugging console. The onboarding question is whether a developer gets from 'open hub' to 'MCP server active in context' in under two minutes, and based on the described flow that seems achievable if credential prompting is handled inline rather than punted to documentation. The gap between what's shipped and what's needed is quality curation: 200 servers with no signal about which 20 are actually production-ready means users will install a broken server on their first try, get frustrated, and never come back — that's the specific product decision that needs to happen next.”