Get the latest tech news

Letting users trust their own MCP clients, without opening a phishing hole


Why MCP servers either refuse custom clients or open a phishing hole, and how per-user trusted redirect URIs, decided at sign-in, give you both.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of users

users

Photo of mcp

mcp

Photo of MCP clients

MCP clients

Related news:

News photo

Top password manager mSecure tells users to change passwords immediately

News photo

More ads coming to Reddit, platform will evaluate how users respond

News photo

AI Was Supposed to Save You Time. Instead, Users Are Working 90 Minutes Longer a Day.