Live page · Day archive

Letting users trust their own MCP clients, without opening a phishing hole

Read the original at Hacker News

Summary

MCP servers either refuse custom clients or open a phishing hole, but per-user trusted redirect URIs decided at sign-in provide both security and flexibility.

Carried by: Hacker News. First seen: .