'Product: Clarify "Mask Connected Account Secrets" dashboard behavior' (SEC-353)
User instruction:
@devin please make this change
Updates description copy for two settings on the project config tab per SEC-353:
"Require API Key for MCP" copy is left unchanged (per the issue).
Link to Devin session: https://app.devin.ai/sessions/9a5d8c256ea3459db53a1883e08322d0 Requested by: @palash-c
'Product: Clarify "Mask Connected Account Secrets" dashboard behavior' (SEC-353)
User instruction:
@devin please make this change
I'll be helping with this pull request! Here's what you should know:
✅ I will automatically:
⚙️ Control Options:
Update setting descriptions in both dashboards with accurate copy. Remove MCP setting from new dashboard.
Current design is clean with just labels. Long descriptions would clutter it.
Recommendation: Add info icon (ⓘ) with tooltip on hover
Two-factor authentication ⓘ [toggle]
Mask connected account secrets ⓘ [toggle]
Keep labels clean, show full explanation in tooltip on hover.
Already has description pattern under each label. Just update the text.
New dashboard (tooltip):
Requires user ID for all tool executions and validates it matches the connected account owner. Prevents cross-user account access.
Old dashboard (description):
Requires user ID for tool executions. Validates the ID matches the connected account owner.
New dashboard (tooltip):
Hides credentials in Connected Account API responses. Only affects custom auth configs — for Composio-managed auth is always masked.
Old dashboard (description):
Hide credentials in API responses for custom auth configs. Composio-managed auth is always masked.
Remove from new dashboard entirely.
Old dashboard (description): no change
The latest updates on your projects. Learn more about Vercel for GitHub.
| Project | Deployment | Actions | Updated (UTC) |
|---|---|---|---|
| platform-frontend | Preview, Comment | Apr 25, 2026 9:16am |