Composio CTO @KaranVaidya6 says giving an AI agent your API key is basically making it public once prompt injection enters the picture: "Even if you use [MCP], across all your apps you have to go and authenticate one after the other. If you use Codex, if you switch to ChatGPT, Claude Code, you'll have to do it all over again." "In some cases where MCPs don't exist, you have to literally share the API keys to the agent, which is definitely not secure. It's kind of giving your API key to…