I'm working on my weekly agent security blog post, and this came across my research. If you've built MCP servers in Python, you should check out this security advisory: github.com/modelcontext...
github.comOAuth client could send credentials to an authorization server chosen by the MCP server### Summary
In affected versions, the SDK's OAuth client support (`mcp.client.auth`) let the MCP server a client connected to decide where the client's OAuth credentials were sent:
- the authoriza...
0 reposts5 likes