Update core_mcp.py

core_mcp.py

@@ -204,6 +204,22 @@ def generate_transaction_id() -> str:
     random_suffix = uuid.uuid4().hex[:4].upper()
     return f"{timestamp}-{random_suffix}"
 
+def sanitize_error_message(error_msg: str) -> str:
+    """
+    Scrub API keys and sensitive URLs from error messages.
+    Removes everything after '?' in URLs to prevent API key exposure.
+    """
+    import re
+    
+    # Pattern to match URLs with query parameters (containing API keys)
+    # This will find "for url: https://...?key=..." and remove everything after the ?
+    pattern = r'(for url: https?://[^\s?]+)\?[^\s]*'
+    
+    # Replace with just the base URL without query parameters
+    sanitized = re.sub(pattern, r'\1', error_msg)
+    
+    return sanitized
+
 def execute_tool(tool_name: str, params: Dict[str, str]) -> Dict[str, any]:
     transaction_id = generate_transaction_id()
     timestamp = datetime.now().isoformat()