---
id: gk-block-mcp-credential-seal-mode
title: "Filter - gk/block-mcp/credential/seal-mode"
sidebar_label: "gk/block-mcp/credential/seal-mode"
tags:
  - "2.0.0"
---

# Filter: gk/block-mcp/credential/seal-mode

Decide whether the downloadable .mcpb bundle carries the password.

By default ('prefill') the generated Claude Desktop bundle embeds the freshly minted Application Password so installation is a single double-click. Tighten this to 'paste' on high-security setups: the downloaded file ships with an empty password field and the plaintext is shown once in the UI for the admin to copy by hand — so the secret never lives inside a file that might land in Downloads, a backup, or a shared drive.

## Parameters

| Name | Type | Description |
|------|------|-------------|
| $mode | `string` | Secret-at-rest mode: 'prefill' to embed, 'paste' to omit. Default 'prefill'. |

## Example

// Never write the password into the bundle file.

```php
add_filter( 'gk/block-mcp/credential/seal-mode', function () {
    return 'paste';
} );
```

### Since

- [2.0.0](../../since/2-0-0/)

### Source

Defined in `wordpress-plugin/gk-block-api/includes/class-connect-page.php` at line 518